# Flog Txt Version 1 # Analyzer Version: 3.2.1 # Analyzer Build Date: Feb 5 2020 10:35:20 # Log Creation Date: 17.02.2020 13:24:31.849 Process: id = "1" image_name = "server.exe" filename = "c:\\users\\fd1hvy\\desktop\\server.exe" page_root = "0x184ad000" os_pid = "0x13dc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7d0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\server.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x13e0 [0088.339] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0088.350] RoInitialize () returned 0x1 [0088.351] RoUninitialize () returned 0x0 [0094.883] CoTaskMemAlloc (cb=0x20c) returned 0xdbbeb0 [0094.883] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0xdbbeb0 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0094.940] CoTaskMemFree (pv=0xdbbeb0) [0095.766] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x96d6c8 | out: phkResult=0x96d6c8*=0x0) returned 0x2 [0095.768] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0095.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x96e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0095.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0095.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0095.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0095.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0096.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0096.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.037] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.txt", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.050] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0570 [0096.055] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.056] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1942bce0, ftCreationTime.dwHighDateTime=0x1d5d68b, ftLastAccessTime.dwLowDateTime=0xdf8c5d90, ftLastAccessTime.dwHighDateTime=0x1d5d409, ftLastWriteTime.dwLowDateTime=0xdf8c5d90, ftLastWriteTime.dwHighDateTime=0x1d5d409, nFileSizeHigh=0x0, nFileSizeLow=0x14076, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif", cAlternateFileName="")) returned 1 [0096.058] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0096.059] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0096.060] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0096.062] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0096.063] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0096.064] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.065] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f988c70, ftCreationTime.dwHighDateTime=0x1d5d44d, ftLastAccessTime.dwLowDateTime=0x50232b90, ftLastAccessTime.dwHighDateTime=0x1d5d187, ftLastWriteTime.dwLowDateTime=0x50232b90, ftLastWriteTime.dwHighDateTime=0x1d5d187, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif", cAlternateFileName="DFJZZJ~1.GIF")) returned 1 [0096.066] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0096.067] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d20cba0, ftCreationTime.dwHighDateTime=0x1d5d139, ftLastAccessTime.dwLowDateTime=0xa060c240, ftLastAccessTime.dwHighDateTime=0x1d5d275, ftLastWriteTime.dwLowDateTime=0xa060c240, ftLastWriteTime.dwHighDateTime=0x1d5d275, nFileSizeHigh=0x0, nFileSizeLow=0x1d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png", cAlternateFileName="J3RAR3~1.PNG")) returned 1 [0096.068] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e146480, ftCreationTime.dwHighDateTime=0x1d5cc37, ftLastAccessTime.dwLowDateTime=0xb35e5710, ftLastAccessTime.dwHighDateTime=0x1d5cc97, ftLastWriteTime.dwLowDateTime=0xb35e5710, ftLastWriteTime.dwHighDateTime=0x1d5cc97, nFileSizeHigh=0x0, nFileSizeLow=0x191c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif", cAlternateFileName="MVO-F_~1.GIF")) returned 1 [0096.069] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0096.070] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0096.070] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0096.071] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0096.072] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0096.073] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0096.074] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0096.074] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0096.075] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0096.076] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0096.076] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0096.077] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0096.078] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0096.078] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0096.079] FindClose (in: hFindFile=0xdd0570 | out: hFindFile=0xdd0570) returned 1 [0096.080] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.txt", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.532] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0e10 [0096.533] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.533] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0096.534] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0096.534] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0096.535] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0096.535] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0096.536] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0096.536] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0096.537] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0096.537] FindClose (in: hFindFile=0xdd0e10 | out: hFindFile=0xdd0e10) returned 1 [0096.537] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.txt", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.538] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0096.539] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.539] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0096.539] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0096.540] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0096.540] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0096.541] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.txt", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.541] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0630 [0096.542] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.542] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c7ad430, ftCreationTime.dwHighDateTime=0x1d5d36e, ftLastAccessTime.dwLowDateTime=0xcb2513b0, ftLastAccessTime.dwHighDateTime=0x1d5c8dd, ftLastWriteTime.dwLowDateTime=0xcb2513b0, ftLastWriteTime.dwHighDateTime=0x1d5c8dd, nFileSizeHigh=0x0, nFileSizeLow=0x5142, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png", cAlternateFileName="5WCK2J~1.PNG")) returned 1 [0096.542] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0096.543] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0096.543] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0096.544] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0096.544] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0096.545] FindClose (in: hFindFile=0xdd0630 | out: hFindFile=0xdd0630) returned 1 [0096.545] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.txt", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.546] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0d50 [0096.546] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.547] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0096.547] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91fb4d0, ftCreationTime.dwHighDateTime=0x1d5d16a, ftLastAccessTime.dwLowDateTime=0x45929ec0, ftLastAccessTime.dwHighDateTime=0x1d5d5a3, ftLastWriteTime.dwLowDateTime=0x45929ec0, ftLastWriteTime.dwHighDateTime=0x1d5d5a3, nFileSizeHigh=0x0, nFileSizeLow=0x165cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png", cAlternateFileName="EASHFL~1.PNG")) returned 1 [0096.548] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0096.548] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0096.549] FindClose (in: hFindFile=0xdd0d50 | out: hFindFile=0xdd0d50) returned 1 [0096.549] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.txt", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.549] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0ed0 [0096.550] FindNextFileW (in: hFindFile=0xdd0ed0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.551] FindNextFileW (in: hFindFile=0xdd0ed0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0096.551] FindNextFileW (in: hFindFile=0xdd0ed0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc7d410, ftCreationTime.dwHighDateTime=0x1d5d23b, ftLastAccessTime.dwLowDateTime=0x28333130, ftLastAccessTime.dwHighDateTime=0x1d5ca47, ftLastWriteTime.dwLowDateTime=0x28333130, ftLastWriteTime.dwHighDateTime=0x1d5ca47, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif", cAlternateFileName="BEYTVE~1.GIF")) returned 1 [0096.551] FindNextFileW (in: hFindFile=0xdd0ed0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9637c80, ftCreationTime.dwHighDateTime=0x1d5cf3e, ftLastAccessTime.dwLowDateTime=0xcef6ccd0, ftLastAccessTime.dwHighDateTime=0x1d5cba9, ftLastWriteTime.dwLowDateTime=0xcef6ccd0, ftLastWriteTime.dwHighDateTime=0x1d5cba9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx", cAlternateFileName="EVUI~1.DOC")) returned 1 [0096.552] FindNextFileW (in: hFindFile=0xdd0ed0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0096.552] FindNextFileW (in: hFindFile=0xdd0ed0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0096.553] FindNextFileW (in: hFindFile=0xdd0ed0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0096.553] FindClose (in: hFindFile=0xdd0ed0 | out: hFindFile=0xdd0ed0) returned 1 [0096.553] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.txt", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0096.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0096.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0096.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0096.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0096.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0096.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.556] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.jpeg", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.557] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd05d0 [0096.557] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.558] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1942bce0, ftCreationTime.dwHighDateTime=0x1d5d68b, ftLastAccessTime.dwLowDateTime=0xdf8c5d90, ftLastAccessTime.dwHighDateTime=0x1d5d409, ftLastWriteTime.dwLowDateTime=0xdf8c5d90, ftLastWriteTime.dwHighDateTime=0x1d5d409, nFileSizeHigh=0x0, nFileSizeLow=0x14076, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif", cAlternateFileName="")) returned 1 [0096.558] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0096.559] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0096.559] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0096.560] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0096.597] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0096.597] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.598] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f988c70, ftCreationTime.dwHighDateTime=0x1d5d44d, ftLastAccessTime.dwLowDateTime=0x50232b90, ftLastAccessTime.dwHighDateTime=0x1d5d187, ftLastWriteTime.dwLowDateTime=0x50232b90, ftLastWriteTime.dwHighDateTime=0x1d5d187, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif", cAlternateFileName="DFJZZJ~1.GIF")) returned 1 [0096.599] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0096.599] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d20cba0, ftCreationTime.dwHighDateTime=0x1d5d139, ftLastAccessTime.dwLowDateTime=0xa060c240, ftLastAccessTime.dwHighDateTime=0x1d5d275, ftLastWriteTime.dwLowDateTime=0xa060c240, ftLastWriteTime.dwHighDateTime=0x1d5d275, nFileSizeHigh=0x0, nFileSizeLow=0x1d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png", cAlternateFileName="J3RAR3~1.PNG")) returned 1 [0096.600] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e146480, ftCreationTime.dwHighDateTime=0x1d5cc37, ftLastAccessTime.dwLowDateTime=0xb35e5710, ftLastAccessTime.dwHighDateTime=0x1d5cc97, ftLastWriteTime.dwLowDateTime=0xb35e5710, ftLastWriteTime.dwHighDateTime=0x1d5cc97, nFileSizeHigh=0x0, nFileSizeLow=0x191c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif", cAlternateFileName="MVO-F_~1.GIF")) returned 1 [0096.601] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0096.602] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0096.602] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0096.602] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0096.603] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0096.604] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0096.604] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0096.605] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0096.605] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0096.605] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0096.606] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0096.606] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0096.607] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0096.608] FindNextFileW (in: hFindFile=0xdd05d0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0096.608] FindClose (in: hFindFile=0xdd05d0 | out: hFindFile=0xdd05d0) returned 1 [0096.608] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.jpeg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.609] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0390 [0096.610] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.610] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0096.611] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0096.611] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0096.612] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0096.612] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0096.613] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0096.613] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0096.614] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0096.614] FindClose (in: hFindFile=0xdd0390 | out: hFindFile=0xdd0390) returned 1 [0096.615] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.jpeg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.615] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0ff0 [0096.616] FindNextFileW (in: hFindFile=0xdd0ff0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.616] FindNextFileW (in: hFindFile=0xdd0ff0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0096.617] FindNextFileW (in: hFindFile=0xdd0ff0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0096.618] FindNextFileW (in: hFindFile=0xdd0ff0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0096.618] FindClose (in: hFindFile=0xdd0ff0 | out: hFindFile=0xdd0ff0) returned 1 [0096.618] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.jpeg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.619] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0390 [0096.620] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.620] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c7ad430, ftCreationTime.dwHighDateTime=0x1d5d36e, ftLastAccessTime.dwLowDateTime=0xcb2513b0, ftLastAccessTime.dwHighDateTime=0x1d5c8dd, ftLastWriteTime.dwLowDateTime=0xcb2513b0, ftLastWriteTime.dwHighDateTime=0x1d5c8dd, nFileSizeHigh=0x0, nFileSizeLow=0x5142, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png", cAlternateFileName="5WCK2J~1.PNG")) returned 1 [0096.621] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0096.621] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0096.622] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0096.624] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0096.624] FindNextFileW (in: hFindFile=0xdd0390, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0096.625] FindClose (in: hFindFile=0xdd0390 | out: hFindFile=0xdd0390) returned 1 [0096.625] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.jpeg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.626] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0510 [0096.627] FindNextFileW (in: hFindFile=0xdd0510, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.627] FindNextFileW (in: hFindFile=0xdd0510, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0096.628] FindNextFileW (in: hFindFile=0xdd0510, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91fb4d0, ftCreationTime.dwHighDateTime=0x1d5d16a, ftLastAccessTime.dwLowDateTime=0x45929ec0, ftLastAccessTime.dwHighDateTime=0x1d5d5a3, ftLastWriteTime.dwLowDateTime=0x45929ec0, ftLastWriteTime.dwHighDateTime=0x1d5d5a3, nFileSizeHigh=0x0, nFileSizeLow=0x165cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png", cAlternateFileName="EASHFL~1.PNG")) returned 1 [0096.628] FindNextFileW (in: hFindFile=0xdd0510, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0096.629] FindNextFileW (in: hFindFile=0xdd0510, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0096.629] FindClose (in: hFindFile=0xdd0510 | out: hFindFile=0xdd0510) returned 1 [0096.630] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.jpeg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.630] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0096.631] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.631] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0096.632] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc7d410, ftCreationTime.dwHighDateTime=0x1d5d23b, ftLastAccessTime.dwLowDateTime=0x28333130, ftLastAccessTime.dwHighDateTime=0x1d5ca47, ftLastWriteTime.dwLowDateTime=0x28333130, ftLastWriteTime.dwHighDateTime=0x1d5ca47, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif", cAlternateFileName="BEYTVE~1.GIF")) returned 1 [0096.632] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9637c80, ftCreationTime.dwHighDateTime=0x1d5cf3e, ftLastAccessTime.dwLowDateTime=0xcef6ccd0, ftLastAccessTime.dwHighDateTime=0x1d5cba9, ftLastWriteTime.dwLowDateTime=0xcef6ccd0, ftLastWriteTime.dwHighDateTime=0x1d5cba9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx", cAlternateFileName="EVUI~1.DOC")) returned 1 [0096.633] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0096.633] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0096.633] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0096.634] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0096.634] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.jpeg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0096.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0096.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0096.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0096.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0096.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0096.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0096.636] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.gif", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1942bce0, ftCreationTime.dwHighDateTime=0x1d5d68b, ftLastAccessTime.dwLowDateTime=0xdf8c5d90, ftLastAccessTime.dwHighDateTime=0x1d5d409, ftLastWriteTime.dwLowDateTime=0xdf8c5d90, ftLastWriteTime.dwHighDateTime=0x1d5d409, nFileSizeHigh=0x0, nFileSizeLow=0x14076, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif", cAlternateFileName="")) returned 0xdd10b0 [0096.637] FindClose (in: hFindFile=0xdd10b0 | out: hFindFile=0xdd10b0) returned 1 [0096.637] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0570 [0096.637] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaaad4930, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xaaad4930, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.638] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1942bce0, ftCreationTime.dwHighDateTime=0x1d5d68b, ftLastAccessTime.dwLowDateTime=0xdf8c5d90, ftLastAccessTime.dwHighDateTime=0x1d5d409, ftLastWriteTime.dwLowDateTime=0xdf8c5d90, ftLastWriteTime.dwHighDateTime=0x1d5d409, nFileSizeHigh=0x0, nFileSizeLow=0x14076, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif", cAlternateFileName="")) returned 1 [0096.651] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0096.652] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0096.652] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0096.653] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0096.653] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0096.653] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.655] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f988c70, ftCreationTime.dwHighDateTime=0x1d5d44d, ftLastAccessTime.dwLowDateTime=0x50232b90, ftLastAccessTime.dwHighDateTime=0x1d5d187, ftLastWriteTime.dwLowDateTime=0x50232b90, ftLastWriteTime.dwHighDateTime=0x1d5d187, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif", cAlternateFileName="DFJZZJ~1.GIF")) returned 1 [0096.655] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0096.656] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d20cba0, ftCreationTime.dwHighDateTime=0x1d5d139, ftLastAccessTime.dwLowDateTime=0xa060c240, ftLastAccessTime.dwHighDateTime=0x1d5d275, ftLastWriteTime.dwLowDateTime=0xa060c240, ftLastWriteTime.dwHighDateTime=0x1d5d275, nFileSizeHigh=0x0, nFileSizeLow=0x1d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png", cAlternateFileName="J3RAR3~1.PNG")) returned 1 [0096.657] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e146480, ftCreationTime.dwHighDateTime=0x1d5cc37, ftLastAccessTime.dwLowDateTime=0xb35e5710, ftLastAccessTime.dwHighDateTime=0x1d5cc97, ftLastWriteTime.dwLowDateTime=0xb35e5710, ftLastWriteTime.dwHighDateTime=0x1d5cc97, nFileSizeHigh=0x0, nFileSizeLow=0x191c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif", cAlternateFileName="MVO-F_~1.GIF")) returned 1 [0096.657] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0096.658] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0096.659] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0096.660] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0096.660] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0096.661] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0096.662] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0096.663] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0096.663] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0096.664] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0096.665] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0096.666] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0096.667] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0096.668] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0096.669] FindClose (in: hFindFile=0xdd0570 | out: hFindFile=0xdd0570) returned 1 [0096.670] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.gif", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1942bce0, ftCreationTime.dwHighDateTime=0x1d5d68b, ftLastAccessTime.dwLowDateTime=0xdf8c5d90, ftLastAccessTime.dwHighDateTime=0x1d5d409, ftLastWriteTime.dwLowDateTime=0xdf8c5d90, ftLastWriteTime.dwHighDateTime=0x1d5d409, nFileSizeHigh=0x0, nFileSizeLow=0x14076, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif", cAlternateFileName="")) returned 0xdd09f0 [0096.693] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f988c70, ftCreationTime.dwHighDateTime=0x1d5d44d, ftLastAccessTime.dwLowDateTime=0x50232b90, ftLastAccessTime.dwHighDateTime=0x1d5d187, ftLastWriteTime.dwLowDateTime=0x50232b90, ftLastWriteTime.dwHighDateTime=0x1d5d187, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif", cAlternateFileName="DFJZZJ~1.GIF")) returned 1 [0096.694] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e146480, ftCreationTime.dwHighDateTime=0x1d5cc37, ftLastAccessTime.dwLowDateTime=0xb35e5710, ftLastAccessTime.dwHighDateTime=0x1d5cc97, ftLastWriteTime.dwLowDateTime=0xb35e5710, ftLastWriteTime.dwHighDateTime=0x1d5cc97, nFileSizeHigh=0x0, nFileSizeLow=0x191c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif", cAlternateFileName="MVO-F_~1.GIF")) returned 1 [0096.695] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.695] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0096.695] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0bd0 [0096.696] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.697] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0096.697] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0096.698] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0096.699] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0096.699] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0096.700] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0096.701] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0096.702] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0096.702] FindClose (in: hFindFile=0xdd0bd0 | out: hFindFile=0xdd0bd0) returned 1 [0096.703] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.gif", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.704] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd10b0 [0096.705] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.706] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0096.706] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0096.707] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0096.707] FindClose (in: hFindFile=0xdd10b0 | out: hFindFile=0xdd10b0) returned 1 [0096.707] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.gif", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.708] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0096.709] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.709] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c7ad430, ftCreationTime.dwHighDateTime=0x1d5d36e, ftLastAccessTime.dwLowDateTime=0xcb2513b0, ftLastAccessTime.dwHighDateTime=0x1d5c8dd, ftLastWriteTime.dwLowDateTime=0xcb2513b0, ftLastWriteTime.dwHighDateTime=0x1d5c8dd, nFileSizeHigh=0x0, nFileSizeLow=0x5142, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png", cAlternateFileName="5WCK2J~1.PNG")) returned 1 [0096.710] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0096.710] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0096.711] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0096.712] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0096.713] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0096.713] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0096.714] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.gif", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.715] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0450 [0096.716] FindNextFileW (in: hFindFile=0xdd0450, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.753] FindNextFileW (in: hFindFile=0xdd0450, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0096.754] FindNextFileW (in: hFindFile=0xdd0450, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91fb4d0, ftCreationTime.dwHighDateTime=0x1d5d16a, ftLastAccessTime.dwLowDateTime=0x45929ec0, ftLastAccessTime.dwHighDateTime=0x1d5d5a3, ftLastWriteTime.dwLowDateTime=0x45929ec0, ftLastWriteTime.dwHighDateTime=0x1d5d5a3, nFileSizeHigh=0x0, nFileSizeLow=0x165cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png", cAlternateFileName="EASHFL~1.PNG")) returned 1 [0096.754] FindNextFileW (in: hFindFile=0xdd0450, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0096.755] FindNextFileW (in: hFindFile=0xdd0450, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0096.755] FindClose (in: hFindFile=0xdd0450 | out: hFindFile=0xdd0450) returned 1 [0096.756] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.gif", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0096.757] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0096.757] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.757] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0096.758] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc7d410, ftCreationTime.dwHighDateTime=0x1d5d23b, ftLastAccessTime.dwLowDateTime=0x28333130, ftLastAccessTime.dwHighDateTime=0x1d5ca47, ftLastWriteTime.dwLowDateTime=0x28333130, ftLastWriteTime.dwHighDateTime=0x1d5ca47, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif", cAlternateFileName="BEYTVE~1.GIF")) returned 1 [0096.759] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9637c80, ftCreationTime.dwHighDateTime=0x1d5cf3e, ftLastAccessTime.dwLowDateTime=0xcef6ccd0, ftLastAccessTime.dwHighDateTime=0x1d5cba9, ftLastWriteTime.dwLowDateTime=0xcef6ccd0, ftLastWriteTime.dwHighDateTime=0x1d5cba9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx", cAlternateFileName="EVUI~1.DOC")) returned 1 [0096.759] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0096.760] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0096.760] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0096.760] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0096.761] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.gif", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc7d410, ftCreationTime.dwHighDateTime=0x1d5d23b, ftLastAccessTime.dwLowDateTime=0x28333130, ftLastAccessTime.dwHighDateTime=0x1d5ca47, ftLastWriteTime.dwLowDateTime=0x28333130, ftLastWriteTime.dwHighDateTime=0x1d5ca47, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif", cAlternateFileName="BEYTVE~1.GIF")) returned 0xdd09f0 [0096.761] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.762] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0096.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0096.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0097.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif.gesd", lpFilePart=0x0) returned 0x26 [0097.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0097.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\2hg5l.gif.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0097.064] GetFileType (hFile=0x88) returned 0x1 [0097.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0097.064] GetFileType (hFile=0x88) returned 0x1 [0097.118] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x96e750 | out: pfEnabled=0x96e750) returned 0x0 [0098.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif", lpFilePart=0x0) returned 0x21 [0098.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0098.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\2hg5l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0098.073] GetFileType (hFile=0x324) returned 0x1 [0098.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0098.074] GetFileType (hFile=0x324) returned 0x1 [0098.075] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.108] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.109] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.165] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.165] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.171] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.172] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.194] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.195] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.201] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.201] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.207] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.490] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.494] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.495] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.498] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.499] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.502] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.503] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.534] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.534] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.540] ReadFile (in: hFile=0x324, lpBuffer=0x2b297b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b297b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.540] WriteFile (in: hFile=0x88, lpBuffer=0x2b2a9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b2a9c8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.845] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.845] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.846] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.846] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.847] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.848] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.849] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.850] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.851] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.851] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.852] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.852] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.853] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.854] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.854] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0098.855] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.856] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x76, lpOverlapped=0x0) returned 1 [0098.856] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.857] ReadFile (in: hFile=0x324, lpBuffer=0x2aaaed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaaed8*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0098.857] CloseHandle (hObject=0x324) returned 1 [0098.858] WriteFile (in: hFile=0x88, lpBuffer=0x2aabf08*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2aabf08*, lpNumberOfBytesWritten=0x96e648*=0x80, lpOverlapped=0x0) returned 1 [0098.859] CloseHandle (hObject=0x88) returned 1 [0098.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif", lpFilePart=0x0) returned 0x21 [0098.917] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\2Hg5l.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\2hg5l.gif")) returned 1 [0098.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif.gesd", lpFilePart=0x0) returned 0x34 [0098.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0098.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\dfjzzjpyhgwzubvwach.gif.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0098.923] GetFileType (hFile=0x88) returned 0x1 [0098.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0098.923] GetFileType (hFile=0x88) returned 0x1 [0099.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif", lpFilePart=0x0) returned 0x2f [0099.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0099.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\dfjzzjpyhgwzubvwach.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0099.128] GetFileType (hFile=0x324) returned 0x1 [0099.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0099.129] GetFileType (hFile=0x324) returned 0x1 [0099.129] ReadFile (in: hFile=0x324, lpBuffer=0x2c2e6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c2e6c8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.198] ReadFile (in: hFile=0x324, lpBuffer=0x2c2e6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c2e6c8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.198] WriteFile (in: hFile=0x88, lpBuffer=0x2c2f8e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c2f8e0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.200] ReadFile (in: hFile=0x324, lpBuffer=0x2c2e6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c2e6c8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.201] WriteFile (in: hFile=0x88, lpBuffer=0x2c2f8e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c2f8e0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.201] ReadFile (in: hFile=0x324, lpBuffer=0x2c2e6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c2e6c8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.202] WriteFile (in: hFile=0x88, lpBuffer=0x2c2f8e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c2f8e0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.227] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.228] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.229] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.229] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.230] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.230] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.231] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.231] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.232] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.232] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.232] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.233] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.233] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.233] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.234] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.234] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.235] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.235] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.236] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.236] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.236] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.237] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.237] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.237] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.238] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.238] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.289] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.289] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.290] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0xfa0, lpOverlapped=0x0) returned 1 [0099.290] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.291] ReadFile (in: hFile=0x324, lpBuffer=0x2aad540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aad540*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0099.291] CloseHandle (hObject=0x324) returned 1 [0099.291] WriteFile (in: hFile=0x88, lpBuffer=0x2aae570*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2aae570*, lpNumberOfBytesWritten=0x96e648*=0xfa0, lpOverlapped=0x0) returned 1 [0099.292] CloseHandle (hObject=0x88) returned 1 [0099.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif", lpFilePart=0x0) returned 0x2f [0099.296] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DFjzzJpyhgWZUBvwACh.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\dfjzzjpyhgwzubvwach.gif")) returned 1 [0099.299] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif.gesd", lpFilePart=0x0) returned 0x35 [0099.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0099.299] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\mvo-f_9wxmnrgc9i zif.gif.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0099.299] GetFileType (hFile=0x88) returned 0x1 [0099.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0099.300] GetFileType (hFile=0x88) returned 0x1 [0099.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif", lpFilePart=0x0) returned 0x30 [0099.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0099.721] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mvo-f_9wxmnrgc9i zif.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0099.722] GetFileType (hFile=0x324) returned 0x1 [0099.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0099.722] GetFileType (hFile=0x324) returned 0x1 [0099.722] ReadFile (in: hFile=0x324, lpBuffer=0x2b08790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b08790*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.782] ReadFile (in: hFile=0x324, lpBuffer=0x2b08790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b08790*, lpNumberOfBytesRead=0x96e748*=0x91c, lpOverlapped=0x0) returned 1 [0099.783] WriteFile (in: hFile=0x88, lpBuffer=0x2b099a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b099a8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.785] ReadFile (in: hFile=0x324, lpBuffer=0x2b08790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b08790*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0099.785] CloseHandle (hObject=0x324) returned 1 [0099.806] WriteFile (in: hFile=0x88, lpBuffer=0x2b099a8*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2b099a8*, lpNumberOfBytesWritten=0x96e648*=0x920, lpOverlapped=0x0) returned 1 [0099.811] CloseHandle (hObject=0x88) returned 1 [0099.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif", lpFilePart=0x0) returned 0x30 [0099.813] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mvO-F_9WXmNrgc9I ZIF.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mvo-f_9wxmnrgc9i zif.gif")) returned 1 [0099.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif.gesd", lpFilePart=0x0) returned 0x40 [0099.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0099.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\beytvemo whyub.gif.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0099.822] GetFileType (hFile=0x88) returned 0x1 [0099.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0099.822] GetFileType (hFile=0x88) returned 0x1 [0099.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif", lpFilePart=0x0) returned 0x3b [0099.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0099.954] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\beytvemo whyub.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0099.955] GetFileType (hFile=0x324) returned 0x1 [0099.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0099.955] GetFileType (hFile=0x324) returned 0x1 [0099.955] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.972] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.972] WriteFile (in: hFile=0x88, lpBuffer=0x2bb3ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb3ef0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.976] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.977] WriteFile (in: hFile=0x88, lpBuffer=0x2bb3ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb3ef0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.977] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.978] WriteFile (in: hFile=0x88, lpBuffer=0x2bb3ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb3ef0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.979] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.979] WriteFile (in: hFile=0x88, lpBuffer=0x2bb3ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb3ef0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.980] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.980] WriteFile (in: hFile=0x88, lpBuffer=0x2bb3ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb3ef0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.981] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.981] WriteFile (in: hFile=0x88, lpBuffer=0x2bb3ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb3ef0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.982] ReadFile (in: hFile=0x324, lpBuffer=0x2bb2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb2cd8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0099.982] WriteFile (in: hFile=0x88, lpBuffer=0x2bb3ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb3ef0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.005] ReadFile (in: hFile=0x324, lpBuffer=0x2ab1218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab1218*, lpNumberOfBytesRead=0x96e748*=0x190, lpOverlapped=0x0) returned 1 [0100.006] WriteFile (in: hFile=0x88, lpBuffer=0x2ab2248*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab2248*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.006] ReadFile (in: hFile=0x324, lpBuffer=0x2ab1218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab1218*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0100.006] CloseHandle (hObject=0x324) returned 1 [0100.007] WriteFile (in: hFile=0x88, lpBuffer=0x2ab2248*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2ab2248*, lpNumberOfBytesWritten=0x96e648*=0x190, lpOverlapped=0x0) returned 1 [0100.007] CloseHandle (hObject=0x88) returned 1 [0100.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif", lpFilePart=0x0) returned 0x3b [0100.010] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\beYTvemo WHyub.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\beytvemo whyub.gif")) returned 1 [0100.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0100.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0100.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd184b41b, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0100.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0100.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0100.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0100.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0100.019] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.jpg", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.021] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd184b41b, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0100.022] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd184b41b, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.023] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0100.025] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0100.025] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0100.026] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0100.027] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0100.027] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0100.027] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0100.028] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0100.029] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0x15cc72c0, ftLastWriteTime.dwHighDateTime=0x1d5d165, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0100.029] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d20cba0, ftCreationTime.dwHighDateTime=0x1d5d139, ftLastAccessTime.dwLowDateTime=0xa060c240, ftLastAccessTime.dwHighDateTime=0x1d5d275, ftLastWriteTime.dwLowDateTime=0xa060c240, ftLastWriteTime.dwHighDateTime=0x1d5d275, nFileSizeHigh=0x0, nFileSizeLow=0x1d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png", cAlternateFileName="J3RAR3~1.PNG")) returned 1 [0100.030] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0100.031] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0100.031] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0100.031] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0100.032] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0100.032] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0100.033] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0100.033] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0100.034] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0100.035] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0100.038] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0100.039] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0100.040] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0100.041] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0100.041] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0100.042] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0100.042] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.jpg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.043] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0100.043] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.044] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0100.044] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0100.045] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0100.045] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0100.046] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0100.046] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0100.047] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0100.047] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0100.047] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0100.048] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.jpg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.048] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0100.049] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.049] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0100.049] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0100.050] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0100.050] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0100.050] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.jpg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.051] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0d50 [0100.052] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.052] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c7ad430, ftCreationTime.dwHighDateTime=0x1d5d36e, ftLastAccessTime.dwLowDateTime=0xcb2513b0, ftLastAccessTime.dwHighDateTime=0x1d5c8dd, ftLastWriteTime.dwLowDateTime=0xcb2513b0, ftLastWriteTime.dwHighDateTime=0x1d5c8dd, nFileSizeHigh=0x0, nFileSizeLow=0x5142, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png", cAlternateFileName="5WCK2J~1.PNG")) returned 1 [0100.052] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0100.053] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0100.053] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0100.053] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0100.054] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0100.054] FindClose (in: hFindFile=0xdd0d50 | out: hFindFile=0xdd0d50) returned 1 [0100.055] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.jpg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.055] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0100.056] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.056] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0100.056] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91fb4d0, ftCreationTime.dwHighDateTime=0x1d5d16a, ftLastAccessTime.dwLowDateTime=0x45929ec0, ftLastAccessTime.dwHighDateTime=0x1d5d5a3, ftLastWriteTime.dwLowDateTime=0x45929ec0, ftLastWriteTime.dwHighDateTime=0x1d5d5a3, nFileSizeHigh=0x0, nFileSizeLow=0x165cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png", cAlternateFileName="EASHFL~1.PNG")) returned 1 [0100.057] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0100.057] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0100.058] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0100.058] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.jpg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.059] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0570 [0100.059] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0x15cc72c0, ftLastAccessTime.dwHighDateTime=0x1d5d165, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.061] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0100.061] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0100.061] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9637c80, ftCreationTime.dwHighDateTime=0x1d5cf3e, ftLastAccessTime.dwLowDateTime=0xcef6ccd0, ftLastAccessTime.dwHighDateTime=0x1d5cba9, ftLastWriteTime.dwLowDateTime=0xcef6ccd0, ftLastWriteTime.dwHighDateTime=0x1d5cba9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx", cAlternateFileName="EVUI~1.DOC")) returned 1 [0100.062] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0100.062] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0100.062] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0100.063] FindClose (in: hFindFile=0xdd0570 | out: hFindFile=0xdd0570) returned 1 [0100.063] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.jpg", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0100.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0100.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0100.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0100.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd184b41b, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0100.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0100.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0100.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0100.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0100.066] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.png", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d20cba0, ftCreationTime.dwHighDateTime=0x1d5d139, ftLastAccessTime.dwLowDateTime=0xa060c240, ftLastAccessTime.dwHighDateTime=0x1d5d275, ftLastWriteTime.dwLowDateTime=0xa060c240, ftLastWriteTime.dwHighDateTime=0x1d5d275, nFileSizeHigh=0x0, nFileSizeLow=0x1d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png", cAlternateFileName="J3RAR3~1.PNG")) returned 0xdd09f0 [0100.067] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0100.067] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd184b41b, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0100.068] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd184b41b, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.069] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0100.069] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0100.070] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0100.070] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0100.071] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0100.071] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0100.071] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0100.072] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0100.072] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0100.073] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d20cba0, ftCreationTime.dwHighDateTime=0x1d5d139, ftLastAccessTime.dwLowDateTime=0xa060c240, ftLastAccessTime.dwHighDateTime=0x1d5d275, ftLastWriteTime.dwLowDateTime=0xa060c240, ftLastWriteTime.dwHighDateTime=0x1d5d275, nFileSizeHigh=0x0, nFileSizeLow=0x1d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png", cAlternateFileName="J3RAR3~1.PNG")) returned 1 [0100.073] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0100.074] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0100.074] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0100.074] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0100.075] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0100.075] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0100.076] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0100.076] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0100.077] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0100.077] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0100.077] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0100.078] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0100.079] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0100.079] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0100.080] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0100.080] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0100.080] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.png", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d20cba0, ftCreationTime.dwHighDateTime=0x1d5d139, ftLastAccessTime.dwLowDateTime=0xa060c240, ftLastAccessTime.dwHighDateTime=0x1d5d275, ftLastWriteTime.dwLowDateTime=0xa060c240, ftLastWriteTime.dwHighDateTime=0x1d5d275, nFileSizeHigh=0x0, nFileSizeLow=0x1d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png", cAlternateFileName="J3RAR3~1.PNG")) returned 0xdd04b0 [0100.081] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.081] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0100.082] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0100.124] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.125] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0100.126] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0100.127] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0100.128] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0100.129] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0100.130] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0100.130] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0100.131] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0100.132] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0100.133] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.png", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.133] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd1050 [0100.134] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.135] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0100.136] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0100.136] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0100.137] FindClose (in: hFindFile=0xdd1050 | out: hFindFile=0xdd1050) returned 1 [0100.137] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.png", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.138] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0d50 [0100.138] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.139] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c7ad430, ftCreationTime.dwHighDateTime=0x1d5d36e, ftLastAccessTime.dwLowDateTime=0xcb2513b0, ftLastAccessTime.dwHighDateTime=0x1d5c8dd, ftLastWriteTime.dwLowDateTime=0xcb2513b0, ftLastWriteTime.dwHighDateTime=0x1d5c8dd, nFileSizeHigh=0x0, nFileSizeLow=0x5142, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png", cAlternateFileName="5WCK2J~1.PNG")) returned 1 [0100.140] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0100.141] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0100.142] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0100.143] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0100.143] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0100.143] FindClose (in: hFindFile=0xdd0d50 | out: hFindFile=0xdd0d50) returned 1 [0100.144] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.png", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c7ad430, ftCreationTime.dwHighDateTime=0x1d5d36e, ftLastAccessTime.dwLowDateTime=0xcb2513b0, ftLastAccessTime.dwHighDateTime=0x1d5c8dd, ftLastWriteTime.dwLowDateTime=0xcb2513b0, ftLastWriteTime.dwHighDateTime=0x1d5c8dd, nFileSizeHigh=0x0, nFileSizeLow=0x5142, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png", cAlternateFileName="5WCK2J~1.PNG")) returned 0xdd09f0 [0100.144] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.144] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0100.145] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0100.173] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.173] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91fb4d0, ftCreationTime.dwHighDateTime=0x1d5d16a, ftLastAccessTime.dwLowDateTime=0x45929ec0, ftLastAccessTime.dwHighDateTime=0x1d5d5a3, ftLastWriteTime.dwLowDateTime=0x45929ec0, ftLastWriteTime.dwHighDateTime=0x1d5d5a3, nFileSizeHigh=0x0, nFileSizeLow=0x165cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png", cAlternateFileName="EASHFL~1.PNG")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0100.174] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0100.175] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.png", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91fb4d0, ftCreationTime.dwHighDateTime=0x1d5d16a, ftLastAccessTime.dwLowDateTime=0x45929ec0, ftLastAccessTime.dwHighDateTime=0x1d5d5a3, ftLastWriteTime.dwLowDateTime=0x45929ec0, ftLastWriteTime.dwHighDateTime=0x1d5d5a3, nFileSizeHigh=0x0, nFileSizeLow=0x165cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png", cAlternateFileName="EASHFL~1.PNG")) returned 0xdd0cf0 [0100.175] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.175] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0100.176] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0d50 [0100.205] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.205] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0100.205] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0100.205] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9637c80, ftCreationTime.dwHighDateTime=0x1d5cf3e, ftLastAccessTime.dwLowDateTime=0xcef6ccd0, ftLastAccessTime.dwHighDateTime=0x1d5cba9, ftLastWriteTime.dwLowDateTime=0xcef6ccd0, ftLastWriteTime.dwHighDateTime=0x1d5cba9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx", cAlternateFileName="EVUI~1.DOC")) returned 1 [0100.206] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0100.206] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0100.206] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0100.206] FindClose (in: hFindFile=0xdd0d50 | out: hFindFile=0xdd0d50) returned 1 [0100.207] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.png", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0100.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0100.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0100.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png.gesd", lpFilePart=0x0) returned 0x34 [0100.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0100.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\j3rar3n8dk7entsbj8f.png.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0100.210] GetFileType (hFile=0x88) returned 0x1 [0100.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0100.210] GetFileType (hFile=0x88) returned 0x1 [0100.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png", lpFilePart=0x0) returned 0x2f [0100.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0100.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png" (normalized: "c:\\users\\fd1hvy\\desktop\\j3rar3n8dk7entsbj8f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0100.406] GetFileType (hFile=0x324) returned 0x1 [0100.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0100.406] GetFileType (hFile=0x324) returned 0x1 [0100.406] ReadFile (in: hFile=0x324, lpBuffer=0x2b37400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b37400*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0100.428] ReadFile (in: hFile=0x324, lpBuffer=0x2b37400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b37400*, lpNumberOfBytesRead=0x96e748*=0xd8a, lpOverlapped=0x0) returned 1 [0100.428] WriteFile (in: hFile=0x88, lpBuffer=0x2b38618*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b38618*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.431] ReadFile (in: hFile=0x324, lpBuffer=0x2b37400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b37400*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0100.431] CloseHandle (hObject=0x324) returned 1 [0100.431] WriteFile (in: hFile=0x88, lpBuffer=0x2b38618*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2b38618*, lpNumberOfBytesWritten=0x96e648*=0xd90, lpOverlapped=0x0) returned 1 [0100.432] CloseHandle (hObject=0x88) returned 1 [0100.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png", lpFilePart=0x0) returned 0x2f [0100.440] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\J3raR3n8dk7ENtsBj8F.png" (normalized: "c:\\users\\fd1hvy\\desktop\\j3rar3n8dk7entsbj8f.png")) returned 1 [0100.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png.gesd", lpFilePart=0x0) returned 0x43 [0100.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0100.452] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\_uqqt\\5wck2jy-mhp 4kf.png.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0100.456] GetFileType (hFile=0x88) returned 0x1 [0100.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0100.456] GetFileType (hFile=0x88) returned 0x1 [0100.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png", lpFilePart=0x0) returned 0x3e [0100.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0100.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\_uqqt\\5wck2jy-mhp 4kf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0100.548] GetFileType (hFile=0x324) returned 0x1 [0100.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0100.548] GetFileType (hFile=0x324) returned 0x1 [0100.548] ReadFile (in: hFile=0x324, lpBuffer=0x2bea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bea710*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0100.601] ReadFile (in: hFile=0x324, lpBuffer=0x2bea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bea710*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0100.602] WriteFile (in: hFile=0x88, lpBuffer=0x2beb928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2beb928*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.605] ReadFile (in: hFile=0x324, lpBuffer=0x2bea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bea710*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0100.605] WriteFile (in: hFile=0x88, lpBuffer=0x2beb928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2beb928*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.606] ReadFile (in: hFile=0x324, lpBuffer=0x2bea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bea710*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0100.607] WriteFile (in: hFile=0x88, lpBuffer=0x2beb928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2beb928*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.608] ReadFile (in: hFile=0x324, lpBuffer=0x2bea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bea710*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0100.608] WriteFile (in: hFile=0x88, lpBuffer=0x2beb928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2beb928*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.609] ReadFile (in: hFile=0x324, lpBuffer=0x2bea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bea710*, lpNumberOfBytesRead=0x96e748*=0x142, lpOverlapped=0x0) returned 1 [0100.610] WriteFile (in: hFile=0x88, lpBuffer=0x2beb928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2beb928*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.610] ReadFile (in: hFile=0x324, lpBuffer=0x2bea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bea710*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0100.610] CloseHandle (hObject=0x324) returned 1 [0100.611] WriteFile (in: hFile=0x88, lpBuffer=0x2beb928*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2beb928*, lpNumberOfBytesWritten=0x96e648*=0x150, lpOverlapped=0x0) returned 1 [0100.611] CloseHandle (hObject=0x88) returned 1 [0100.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png", lpFilePart=0x0) returned 0x3e [0100.717] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\5wCk2jY-mhp 4kf.png" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\_uqqt\\5wck2jy-mhp 4kf.png")) returned 1 [0100.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png.gesd", lpFilePart=0x0) returned 0x49 [0100.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0100.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\_uqqt\\iaspdh\\eas hflzwyjsat.png.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0100.770] GetFileType (hFile=0x88) returned 0x1 [0100.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0100.771] GetFileType (hFile=0x88) returned 0x1 [0101.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png", lpFilePart=0x0) returned 0x44 [0101.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0101.102] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\_uqqt\\iaspdh\\eas hflzwyjsat.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0101.103] GetFileType (hFile=0x324) returned 0x1 [0101.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0101.103] GetFileType (hFile=0x324) returned 0x1 [0101.103] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.135] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.136] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.144] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.144] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.146] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.147] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.148] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.149] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.153] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.153] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.155] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.156] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.179] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.180] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.181] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.181] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.183] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.184] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.185] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.185] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.186] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.186] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.187] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.187] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.188] ReadFile (in: hFile=0x324, lpBuffer=0x2b05c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b05c08*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.189] WriteFile (in: hFile=0x88, lpBuffer=0x2b06e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b06e20*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.357] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.358] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.358] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.359] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.359] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.360] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.361] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.361] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.362] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.362] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.363] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.363] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.364] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.364] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.365] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.365] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.366] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x5cf, lpOverlapped=0x0) returned 1 [0101.366] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.367] ReadFile (in: hFile=0x324, lpBuffer=0x2ab42e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab42e0*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0101.367] CloseHandle (hObject=0x324) returned 1 [0101.368] WriteFile (in: hFile=0x88, lpBuffer=0x2ab5310*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2ab5310*, lpNumberOfBytesWritten=0x96e648*=0x5d0, lpOverlapped=0x0) returned 1 [0101.368] CloseHandle (hObject=0x88) returned 1 [0101.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png", lpFilePart=0x0) returned 0x44 [0101.376] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\eAS hfLZwYJsat.png" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\_uqqt\\iaspdh\\eas hflzwyjsat.png")) returned 1 [0101.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0101.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0101.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0101.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0101.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.485] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.docx", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.486] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd1050 [0101.487] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.490] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0101.490] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0101.491] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0101.491] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0101.492] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0101.492] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0101.493] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0101.493] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0101.494] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0101.508] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c04ea1, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1c04ea1, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e1b212, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png.gesd", cAlternateFileName="J3RAR3~1.GES")) returned 1 [0101.508] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0101.511] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0101.511] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0101.512] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0101.512] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0101.513] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0101.513] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0101.514] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0101.514] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0101.516] FindClose (in: hFindFile=0xdd1050 | out: hFindFile=0xdd1050) returned 1 [0101.516] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.docx", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.517] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.518] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.518] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0101.519] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0101.519] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0101.520] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0101.520] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0101.521] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0101.521] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0101.521] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0x35750430, ftLastWriteTime.dwHighDateTime=0x1d5c9c1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0101.522] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.522] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.docx", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.523] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.524] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.524] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0101.524] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0101.525] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0101.526] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.526] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.docx", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.527] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0e10 [0101.528] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0x35750430, ftLastAccessTime.dwHighDateTime=0x1d5c9c1, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.528] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e41097, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1feb5cf, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png.gesd", cAlternateFileName="5WCK2J~1.GES")) returned 1 [0101.529] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xdf4f4d10, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0101.529] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0101.529] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0101.530] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0101.530] FindNextFileW (in: hFindFile=0xdd0e10, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0101.531] FindClose (in: hFindFile=0xdd0e10 | out: hFindFile=0xdd0e10) returned 1 [0101.531] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.docx", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.532] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.532] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xdf4f4d10, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.533] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0101.533] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd213c1da, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd213c1da, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd27198a2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x165d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png.gesd", cAlternateFileName="EASHFL~1.GES")) returned 1 [0101.534] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0101.534] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0101.535] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.535] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.docx", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.536] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd10b0 [0101.536] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.537] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0101.537] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0101.538] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9637c80, ftCreationTime.dwHighDateTime=0x1d5cf3e, ftLastAccessTime.dwLowDateTime=0xcef6ccd0, ftLastAccessTime.dwHighDateTime=0x1d5cba9, ftLastWriteTime.dwLowDateTime=0xcef6ccd0, ftLastWriteTime.dwHighDateTime=0x1d5cba9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx", cAlternateFileName="EVUI~1.DOC")) returned 1 [0101.538] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0101.539] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0101.539] FindNextFileW (in: hFindFile=0xdd10b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0101.540] FindClose (in: hFindFile=0xdd10b0 | out: hFindFile=0xdd10b0) returned 1 [0101.540] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.docx", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9637c80, ftCreationTime.dwHighDateTime=0x1d5cf3e, ftLastAccessTime.dwLowDateTime=0xcef6ccd0, ftLastAccessTime.dwHighDateTime=0x1d5cba9, ftLastWriteTime.dwLowDateTime=0xcef6ccd0, ftLastWriteTime.dwHighDateTime=0x1d5cba9, nFileSizeHigh=0x0, nFileSizeLow=0xa8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx", cAlternateFileName="EVUI~1.DOC")) returned 0xdd09f0 [0101.541] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.553] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0101.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0101.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx.gesd", lpFilePart=0x0) returned 0x37 [0101.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0101.554] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\evui.docx.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0101.555] GetFileType (hFile=0x88) returned 0x1 [0101.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0101.555] GetFileType (hFile=0x88) returned 0x1 [0101.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx", lpFilePart=0x0) returned 0x32 [0101.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0101.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\evui.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0101.764] GetFileType (hFile=0x324) returned 0x1 [0101.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0101.765] GetFileType (hFile=0x324) returned 0x1 [0101.765] ReadFile (in: hFile=0x324, lpBuffer=0x2c4e9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c4e9b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.786] ReadFile (in: hFile=0x324, lpBuffer=0x2c4e9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c4e9b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.787] WriteFile (in: hFile=0x88, lpBuffer=0x2c4fbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c4fbc8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.790] ReadFile (in: hFile=0x324, lpBuffer=0x2c4e9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c4e9b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.791] WriteFile (in: hFile=0x88, lpBuffer=0x2c4fbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c4fbc8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.792] ReadFile (in: hFile=0x324, lpBuffer=0x2c4e9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c4e9b0*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.792] WriteFile (in: hFile=0x88, lpBuffer=0x2c4fbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c4fbc8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.819] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.820] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.820] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.821] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.822] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.823] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.824] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.825] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.825] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.826] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.827] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0101.827] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.828] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x8e2, lpOverlapped=0x0) returned 1 [0101.828] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.829] ReadFile (in: hFile=0x324, lpBuffer=0x2ab6b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab6b20*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0101.829] CloseHandle (hObject=0x324) returned 1 [0101.829] WriteFile (in: hFile=0x88, lpBuffer=0x2ab7b50*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2ab7b50*, lpNumberOfBytesWritten=0x96e648*=0x8f0, lpOverlapped=0x0) returned 1 [0101.830] CloseHandle (hObject=0x88) returned 1 [0101.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx", lpFilePart=0x0) returned 0x32 [0101.833] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\eVui.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\evui.docx")) returned 1 [0101.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0101.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0101.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0101.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0101.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.842] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.php", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.843] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0630 [0101.844] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.845] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0101.845] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0101.846] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0101.847] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0101.848] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0101.848] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0101.849] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0101.850] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0101.850] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0101.851] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c04ea1, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1c04ea1, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e1b212, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png.gesd", cAlternateFileName="J3RAR3~1.GES")) returned 1 [0101.852] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0101.852] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0101.853] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0101.854] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0101.855] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0101.855] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0101.856] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0101.856] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0101.857] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0101.857] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0101.858] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0101.859] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0101.859] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0101.860] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0101.860] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0101.861] FindClose (in: hFindFile=0xdd0630 | out: hFindFile=0xdd0630) returned 1 [0101.861] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.php", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.861] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0f30 [0101.862] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.863] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0101.863] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0101.864] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0101.864] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0101.865] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0101.865] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0101.866] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0101.866] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0101.866] FindClose (in: hFindFile=0xdd0f30 | out: hFindFile=0xdd0f30) returned 1 [0101.867] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.php", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.867] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0101.868] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.869] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0101.870] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0101.870] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0101.871] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0101.871] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.php", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.872] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0630 [0101.873] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.873] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e41097, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1feb5cf, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png.gesd", cAlternateFileName="5WCK2J~1.GES")) returned 1 [0101.874] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0101.874] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0101.875] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0101.875] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0101.876] FindNextFileW (in: hFindFile=0xdd0630, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0101.876] FindClose (in: hFindFile=0xdd0630 | out: hFindFile=0xdd0630) returned 1 [0101.876] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.php", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.877] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0101.878] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.878] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0101.879] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd213c1da, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd213c1da, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd27198a2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x165d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png.gesd", cAlternateFileName="EASHFL~1.GES")) returned 1 [0101.879] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0101.880] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0101.880] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0101.880] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.php", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.881] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0101.881] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd1a15166, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.882] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0101.883] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0101.883] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28bd392, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd28bd392, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0xa8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx.gesd", cAlternateFileName="EVUIDO~1.GES")) returned 1 [0101.884] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0101.884] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0101.889] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0101.889] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0101.889] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.php", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0101.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0101.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0101.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0101.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0101.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0101.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.891] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.cs", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.892] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.892] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.893] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0101.893] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0101.894] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0101.895] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0101.895] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0101.896] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0101.896] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0101.897] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0101.897] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0101.898] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c04ea1, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1c04ea1, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e1b212, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png.gesd", cAlternateFileName="J3RAR3~1.GES")) returned 1 [0101.899] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0101.899] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0101.900] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0101.900] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0101.901] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0101.901] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0101.902] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0101.902] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0101.903] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0101.903] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0101.903] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0101.904] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0101.905] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0101.905] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0101.906] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0101.906] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.906] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.cs", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.907] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0101.907] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.908] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0101.908] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0101.909] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0101.909] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0101.910] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0101.910] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0101.911] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0101.911] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0101.912] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0101.912] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.cs", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.912] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0101.913] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.913] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0101.914] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0101.915] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0101.915] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0101.916] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.cs", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.917] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0101.918] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.918] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e41097, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1feb5cf, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png.gesd", cAlternateFileName="5WCK2J~1.GES")) returned 1 [0101.919] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0101.920] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0101.920] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0101.921] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0101.922] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0101.922] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0101.922] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.cs", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.923] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.923] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.923] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0101.923] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd213c1da, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd213c1da, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd27198a2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x165d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png.gesd", cAlternateFileName="EASHFL~1.GES")) returned 1 [0101.924] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0101.924] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0101.924] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.924] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.cs", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.925] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0101.925] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.925] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0101.925] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0101.925] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28bd392, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd28bd392, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0xa8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx.gesd", cAlternateFileName="EVUIDO~1.GES")) returned 1 [0101.926] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0101.926] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0101.926] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0101.926] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0101.926] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.cs", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0101.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0101.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0101.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0101.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0101.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0101.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.928] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.cpp", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.928] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd1050 [0101.929] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.929] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0101.929] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0101.929] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0101.930] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0101.930] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0101.930] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0101.930] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0101.930] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0101.930] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0101.931] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c04ea1, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1c04ea1, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e1b212, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png.gesd", cAlternateFileName="J3RAR3~1.GES")) returned 1 [0101.931] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0101.931] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0101.931] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0101.931] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0101.931] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0101.935] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0101.935] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0101.935] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0101.935] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0101.935] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0101.935] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0101.935] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0101.936] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0101.936] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0101.936] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0101.936] FindClose (in: hFindFile=0xdd1050 | out: hFindFile=0xdd1050) returned 1 [0101.936] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.cpp", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.937] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0d50 [0101.937] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.937] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0101.937] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0101.938] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0101.938] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0101.938] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0101.938] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0101.938] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0101.938] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0101.939] FindClose (in: hFindFile=0xdd0d50 | out: hFindFile=0xdd0d50) returned 1 [0101.939] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.cpp", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.940] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0101.940] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.940] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0101.940] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0101.940] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0101.941] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0101.941] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.cpp", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.941] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0101.942] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.942] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e41097, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1feb5cf, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png.gesd", cAlternateFileName="5WCK2J~1.GES")) returned 1 [0101.942] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0101.942] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0101.942] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0101.943] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0101.943] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0101.943] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0101.943] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.cpp", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.944] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd1050 [0101.944] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.944] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0101.944] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd213c1da, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd213c1da, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd27198a2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x165d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png.gesd", cAlternateFileName="EASHFL~1.GES")) returned 1 [0101.945] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0101.945] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0101.945] FindClose (in: hFindFile=0xdd1050 | out: hFindFile=0xdd1050) returned 1 [0101.945] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.cpp", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.946] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0bd0 [0101.946] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.946] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0101.946] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0101.946] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28bd392, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd28bd392, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0xa8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx.gesd", cAlternateFileName="EVUIDO~1.GES")) returned 1 [0101.946] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0101.946] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0101.946] FindNextFileW (in: hFindFile=0xdd0bd0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0101.947] FindClose (in: hFindFile=0xdd0bd0 | out: hFindFile=0xdd0bd0) returned 1 [0101.948] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.cpp", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0101.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0101.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0101.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0101.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0101.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0101.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0101.949] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.rar", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.951] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0f30 [0101.951] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.951] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0101.951] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0101.952] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0101.952] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0101.952] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0101.952] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0101.952] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0101.952] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0101.952] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c04ea1, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1c04ea1, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e1b212, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png.gesd", cAlternateFileName="J3RAR3~1.GES")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0101.953] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0101.954] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0101.954] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0101.954] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0101.954] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0101.954] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0101.954] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0101.954] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 1 [0101.955] FindNextFileW (in: hFindFile=0xdd0f30, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ee770, ftCreationTime.dwHighDateTime=0x1d5d372, ftLastAccessTime.dwLowDateTime=0xe3469c50, ftLastAccessTime.dwHighDateTime=0x1d5d38e, ftLastWriteTime.dwLowDateTime=0xe3469c50, ftLastWriteTime.dwHighDateTime=0x1d5d38e, nFileSizeHigh=0x0, nFileSizeLow=0xcbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi", cAlternateFileName="ZP30MJ~1.AVI")) returned 0 [0101.955] FindClose (in: hFindFile=0xdd0f30 | out: hFindFile=0xdd0f30) returned 1 [0101.955] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.rar", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.956] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.956] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.956] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0101.956] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0101.957] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0101.957] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0101.957] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0101.957] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0101.957] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0101.957] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0101.958] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.958] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.rar", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.959] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.959] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.959] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0101.959] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0101.959] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0101.960] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.960] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.rar", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0101.961] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0101.961] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.961] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e41097, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1feb5cf, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png.gesd", cAlternateFileName="5WCK2J~1.GES")) returned 1 [0101.961] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0101.961] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0101.961] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0101.961] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0101.962] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0101.962] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0101.962] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.rar", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0102.358] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0ab0 [0102.358] FindNextFileW (in: hFindFile=0xdd0ab0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.358] FindNextFileW (in: hFindFile=0xdd0ab0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0102.358] FindNextFileW (in: hFindFile=0xdd0ab0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd213c1da, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd213c1da, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd27198a2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x165d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png.gesd", cAlternateFileName="EASHFL~1.GES")) returned 1 [0102.359] FindNextFileW (in: hFindFile=0xdd0ab0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0102.359] FindNextFileW (in: hFindFile=0xdd0ab0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0102.359] FindClose (in: hFindFile=0xdd0ab0 | out: hFindFile=0xdd0ab0) returned 1 [0102.359] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.rar", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0102.360] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0102.360] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.360] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0102.360] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0102.360] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28bd392, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd28bd392, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0xa8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx.gesd", cAlternateFileName="EVUIDO~1.GES")) returned 1 [0102.361] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0102.361] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0102.361] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0102.361] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0102.361] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.rar", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0102.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0102.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0102.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0102.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0102.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0102.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0102.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0102.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0102.364] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0102.364] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.zip", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0102.364] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0102.365] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e41097, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.365] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0102.365] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0102.365] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0102.365] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0102.366] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0102.366] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0102.366] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0102.366] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0102.366] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0102.366] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c04ea1, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1c04ea1, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e1b212, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png.gesd", cAlternateFileName="J3RAR3~1.GES")) returned 1 [0102.367] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0102.367] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0102.367] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0102.367] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb87d0bd0, ftCreationTime.dwHighDateTime=0x1d5ce61, ftLastAccessTime.dwLowDateTime=0xdf4c9e90, ftLastAccessTime.dwHighDateTime=0x1d5cd3c, ftLastWriteTime.dwLowDateTime=0xdf4c9e90, ftLastWriteTime.dwHighDateTime=0x1d5cd3c, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi", cAlternateFileName="")) returned 1 [0102.367] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0102.367] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0102.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0102.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0102.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0102.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0102.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0102.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0102.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0102.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0102.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0102.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0102.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0102.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0102.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0102.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0102.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0102.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0102.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0102.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0102.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0102.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0102.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0102.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0102.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0102.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0102.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0102.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PotYY.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\potyy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0102.703] GetFileType (hFile=0x324) returned 0x1 [0102.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0102.704] GetFileType (hFile=0x324) returned 0x1 [0102.704] ReadFile (in: hFile=0x324, lpBuffer=0x2c32660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c32660*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0102.777] ReadFile (in: hFile=0x324, lpBuffer=0x2c32660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c32660*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0102.777] WriteFile (in: hFile=0x88, lpBuffer=0x2c33878*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c33878*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.780] ReadFile (in: hFile=0x324, lpBuffer=0x2c32660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c32660*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0102.781] WriteFile (in: hFile=0x88, lpBuffer=0x2c33878*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c33878*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.782] ReadFile (in: hFile=0x324, lpBuffer=0x2c32660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c32660*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0102.782] WriteFile (in: hFile=0x88, lpBuffer=0x2c33878*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c33878*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.783] ReadFile (in: hFile=0x324, lpBuffer=0x2c32660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c32660*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0102.783] WriteFile (in: hFile=0x88, lpBuffer=0x2c33878*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c33878*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.872] ReadFile (in: hFile=0x324, lpBuffer=0x2ab9960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab9960*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0102.872] WriteFile (in: hFile=0x88, lpBuffer=0x2aba990*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aba990*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.873] ReadFile (in: hFile=0x324, lpBuffer=0x2ab9960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab9960*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0102.873] WriteFile (in: hFile=0x88, lpBuffer=0x2aba990*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aba990*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.874] ReadFile (in: hFile=0x324, lpBuffer=0x2ab9960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab9960*, lpNumberOfBytesRead=0x96e748*=0x95c, lpOverlapped=0x0) returned 1 [0102.874] WriteFile (in: hFile=0x88, lpBuffer=0x2aba990*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aba990*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.875] ReadFile (in: hFile=0x324, lpBuffer=0x2ab9960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ab9960*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0102.875] CloseHandle (hObject=0x324) returned 1 [0102.875] WriteFile (in: hFile=0x88, lpBuffer=0x2aba990*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2aba990*, lpNumberOfBytesWritten=0x96e648*=0x960, lpOverlapped=0x0) returned 1 [0102.876] CloseHandle (hObject=0x88) returned 1 [0102.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PotYY.avi", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PotYY.avi", lpFilePart=0x0) returned 0x21 [0102.879] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PotYY.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\potyy.avi")) returned 1 [0102.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi.gesd", lpFilePart=0x0) returned 0x34 [0102.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0102.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\zp30mjfnxuse8wxdofc.avi.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0102.883] GetFileType (hFile=0x88) returned 0x1 [0102.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0102.883] GetFileType (hFile=0x88) returned 0x1 [0103.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi", lpFilePart=0x0) returned 0x2f [0103.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0103.207] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\zp30mjfnxuse8wxdofc.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0103.210] GetFileType (hFile=0x324) returned 0x1 [0103.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0103.210] GetFileType (hFile=0x324) returned 0x1 [0103.210] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.235] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.236] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.242] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.242] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.243] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.243] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.245] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.246] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.246] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.247] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.247] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.248] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.249] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.249] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.250] ReadFile (in: hFile=0x324, lpBuffer=0x2ba0188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ba0188*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.250] WriteFile (in: hFile=0x88, lpBuffer=0x2ba13a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ba13a0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.270] ReadFile (in: hFile=0x324, lpBuffer=0x2abbfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abbfc8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.270] WriteFile (in: hFile=0x88, lpBuffer=0x2abcff8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abcff8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.271] ReadFile (in: hFile=0x324, lpBuffer=0x2abbfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abbfc8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.272] WriteFile (in: hFile=0x88, lpBuffer=0x2abcff8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abcff8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.273] ReadFile (in: hFile=0x324, lpBuffer=0x2abbfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abbfc8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0103.273] WriteFile (in: hFile=0x88, lpBuffer=0x2abcff8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abcff8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.280] ReadFile (in: hFile=0x324, lpBuffer=0x2abbfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abbfc8*, lpNumberOfBytesRead=0x96e748*=0xbc4, lpOverlapped=0x0) returned 1 [0103.280] WriteFile (in: hFile=0x88, lpBuffer=0x2abcff8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abcff8*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0103.281] ReadFile (in: hFile=0x324, lpBuffer=0x2abbfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abbfc8*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0103.281] CloseHandle (hObject=0x324) returned 1 [0103.281] WriteFile (in: hFile=0x88, lpBuffer=0x2abcff8*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2abcff8*, lpNumberOfBytesWritten=0x96e648*=0xbd0, lpOverlapped=0x0) returned 1 [0103.282] CloseHandle (hObject=0x88) returned 1 [0103.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi", lpFilePart=0x0) returned 0x2f [0103.287] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zP30mJFNxuSE8wXDofC.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\zp30mjfnxuse8wxdofc.avi")) returned 1 [0103.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0103.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e700) returned 1 [0103.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\" (normalized: "c:\\users\\fd1hvy\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x96e7e0 | out: lpFileInformation=0x96e7e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd396dbbb, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd396dbbb, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0103.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e6c0) returned 1 [0103.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0103.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e740) returned 1 [0103.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x96e1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0103.832] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.mp4", lpFindFileData=0x96e460 | out: lpFindFileData=0x96e460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 0xdd04b0 [0103.833] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0103.833] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd396dbbb, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd396dbbb, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0103.834] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd396dbbb, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd396dbbb, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.834] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdeb370, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xcfdeb370, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd0f34651, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x14080, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Hg5l.gif.gesd", cAlternateFileName="2HG5LG~1.GES")) returned 1 [0103.835] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 1 [0103.836] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4x-aHVjSuhGt", cAlternateFileName="4X-AHV~1")) returned 1 [0103.836] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8557a9b0, ftCreationTime.dwHighDateTime=0x1d5d13e, ftLastAccessTime.dwLowDateTime=0x7c5ad600, ftLastAccessTime.dwHighDateTime=0x1d5ca06, ftLastWriteTime.dwLowDateTime=0x7c5ad600, ftLastWriteTime.dwHighDateTime=0x1d5ca06, nFileSizeHigh=0x0, nFileSizeLow=0x3733, dwReserved0=0x0, dwReserved1=0x0, cFileName="628RG93tyDPIwX.flv", cAlternateFileName="628RG9~1.FLV")) returned 1 [0103.836] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f49030, ftCreationTime.dwHighDateTime=0x1d5cfc6, ftLastAccessTime.dwLowDateTime=0xbafcf480, ftLastAccessTime.dwHighDateTime=0x1d5c801, ftLastWriteTime.dwLowDateTime=0xbafcf480, ftLastWriteTime.dwHighDateTime=0x1d5c801, nFileSizeHigh=0x0, nFileSizeLow=0x2579, dwReserved0=0x0, dwReserved1=0x0, cFileName="76weo381.doc", cAlternateFileName="")) returned 1 [0103.837] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c785a0, ftCreationTime.dwHighDateTime=0x1d5cf4c, ftLastAccessTime.dwLowDateTime=0xb3115e90, ftLastAccessTime.dwHighDateTime=0x1d5cae1, ftLastWriteTime.dwLowDateTime=0xb3115e90, ftLastWriteTime.dwHighDateTime=0x1d5cae1, nFileSizeHigh=0x0, nFileSizeLow=0x14ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_D7P.m4a", cAlternateFileName="")) returned 1 [0103.838] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.843] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fa6a99, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd0fa6a99, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd133a2a9, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x12fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFjzzJpyhgWZUBvwACh.gif.gesd", cAlternateFileName="DFJZZJ~1.GES")) returned 1 [0103.844] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eQq0M5fMwGq3zz4_", cAlternateFileName="EQQ0M5~1")) returned 1 [0103.845] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c04ea1, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1c04ea1, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1e1b212, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3raR3n8dk7ENtsBj8F.png.gesd", cAlternateFileName="J3RAR3~1.GES")) returned 1 [0103.846] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133a2a9, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd133a2a9, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1824f29, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x1920, dwReserved0=0x0, dwReserved1=0x0, cFileName="mvO-F_9WXmNrgc9I ZIF.gif.gesd", cAlternateFileName="MVO-F_~1.GES")) returned 1 [0103.847] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfd7f0f0, ftCreationTime.dwHighDateTime=0x1d5c904, ftLastAccessTime.dwLowDateTime=0xe7477ae0, ftLastAccessTime.dwHighDateTime=0x1d5d74e, ftLastWriteTime.dwLowDateTime=0xe7477ae0, ftLastWriteTime.dwHighDateTime=0x1d5d74e, nFileSizeHigh=0x0, nFileSizeLow=0xf189, dwReserved0=0x0, dwReserved1=0x0, cFileName="N8wbRThkWEdgmmiG3.mkv", cAlternateFileName="N8WBRT~1.MKV")) returned 1 [0103.848] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688e0bb0, ftCreationTime.dwHighDateTime=0x1d5cdb2, ftLastAccessTime.dwLowDateTime=0x3c9a7500, ftLastAccessTime.dwHighDateTime=0x1d5d679, ftLastWriteTime.dwLowDateTime=0x3c9a7500, ftLastWriteTime.dwHighDateTime=0x1d5d679, nFileSizeHigh=0x0, nFileSizeLow=0x10e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otym.mp3", cAlternateFileName="")) returned 1 [0103.848] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3161b6f, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd3161b6f, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd3567b91, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x7960, dwReserved0=0x0, dwReserved1=0x0, cFileName="PotYY.avi.gesd", cAlternateFileName="POTYYA~1.GES")) returned 1 [0103.849] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0103.849] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea83e0, ftCreationTime.dwHighDateTime=0x1d5d374, ftLastAccessTime.dwLowDateTime=0xd26639f0, ftLastAccessTime.dwHighDateTime=0x1d5d581, ftLastWriteTime.dwLowDateTime=0xd26639f0, ftLastWriteTime.dwHighDateTime=0x1d5d581, nFileSizeHigh=0x0, nFileSizeLow=0x144be, dwReserved0=0x0, dwReserved1=0x0, cFileName="rUnHmKrZiQpZDGsL6tX.swf", cAlternateFileName="RUNHMK~1.SWF")) returned 1 [0103.850] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95002480, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x95002480, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xfcb57000, ftLastWriteTime.dwHighDateTime=0x1d5e593, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="server.exe", cAlternateFileName="")) returned 1 [0103.851] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10118340, ftCreationTime.dwHighDateTime=0x1d5d3a7, ftLastAccessTime.dwLowDateTime=0x4a88dc60, ftLastAccessTime.dwHighDateTime=0x1d5d74b, ftLastWriteTime.dwLowDateTime=0x4a88dc60, ftLastWriteTime.dwHighDateTime=0x1d5d74b, nFileSizeHigh=0x0, nFileSizeLow=0x135a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="tgzwsLUbE.pdf", cAlternateFileName="TGZWSL~1.PDF")) returned 1 [0103.852] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf478d0, ftCreationTime.dwHighDateTime=0x1d5cadb, ftLastAccessTime.dwLowDateTime=0xbe7a9b60, ftLastAccessTime.dwHighDateTime=0x1d5d4ab, ftLastWriteTime.dwLowDateTime=0xbe7a9b60, ftLastWriteTime.dwHighDateTime=0x1d5d4ab, nFileSizeHigh=0x0, nFileSizeLow=0x691b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tw3r_6CP.flv", cAlternateFileName="")) returned 1 [0103.852] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcc1170, ftCreationTime.dwHighDateTime=0x1d5d558, ftLastAccessTime.dwLowDateTime=0xc5b8d890, ftLastAccessTime.dwHighDateTime=0x1d5d624, ftLastWriteTime.dwLowDateTime=0xc5b8d890, ftLastWriteTime.dwHighDateTime=0x1d5d624, nFileSizeHigh=0x0, nFileSizeLow=0xaa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="wnk7ZiX UP5I4sB.mkv", cAlternateFileName="WNK7ZI~1.MKV")) returned 1 [0103.853] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef5e280, ftCreationTime.dwHighDateTime=0x1d5d14e, ftLastAccessTime.dwLowDateTime=0xada35b30, ftLastAccessTime.dwHighDateTime=0x1d5cca2, ftLastWriteTime.dwLowDateTime=0xada35b30, ftLastWriteTime.dwHighDateTime=0x1d5cca2, nFileSizeHigh=0x0, nFileSizeLow=0x7bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkybY30WVlmixu6vohd.mp3", cAlternateFileName="XKYBY3~1.MP3")) returned 1 [0103.855] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1834340, ftCreationTime.dwHighDateTime=0x1d5d32c, ftLastAccessTime.dwLowDateTime=0xa5cd2980, ftLastAccessTime.dwHighDateTime=0x1d5cdf7, ftLastWriteTime.dwLowDateTime=0xa5cd2980, ftLastWriteTime.dwHighDateTime=0x1d5cdf7, nFileSizeHigh=0x0, nFileSizeLow=0xd00e, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCv3.wav", cAlternateFileName="")) returned 1 [0103.855] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7409b0, ftCreationTime.dwHighDateTime=0x1d5ca88, ftLastAccessTime.dwLowDateTime=0x3cf2ece0, ftLastAccessTime.dwHighDateTime=0x1d5d687, ftLastWriteTime.dwLowDateTime=0x3cf2ece0, ftLastWriteTime.dwHighDateTime=0x1d5d687, nFileSizeHigh=0x0, nFileSizeLow=0x15924, dwReserved0=0x0, dwReserved1=0x0, cFileName="zC-POq44cul_Mz1JN.wav", cAlternateFileName="ZC-POQ~1.WAV")) returned 1 [0103.856] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3567b91, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd3567b91, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd394783a, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0xcbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi.gesd", cAlternateFileName="ZP30MJ~1.GES")) returned 1 [0103.857] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3567b91, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd3567b91, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd394783a, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0xcbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zP30mJFNxuSE8wXDofC.avi.gesd", cAlternateFileName="ZP30MJ~1.GES")) returned 0 [0103.857] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0103.858] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.mp4", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3ad230, ftCreationTime.dwHighDateTime=0x1d5d6dc, ftLastAccessTime.dwLowDateTime=0x19b838f0, ftLastAccessTime.dwHighDateTime=0x1d5d012, ftLastWriteTime.dwLowDateTime=0x19b838f0, ftLastWriteTime.dwHighDateTime=0x1d5d012, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3H9gaz7jvQxnR.mp4", cAlternateFileName="3H9GAZ~1.MP4")) returned 0xdd1050 [0103.858] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd000d0, ftCreationTime.dwHighDateTime=0x1d5c823, ftLastAccessTime.dwLowDateTime=0xac0f3d30, ftLastAccessTime.dwHighDateTime=0x1d5ce90, ftLastWriteTime.dwLowDateTime=0xac0f3d30, ftLastWriteTime.dwHighDateTime=0x1d5ce90, nFileSizeHigh=0x0, nFileSizeLow=0x14394, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZTD6h5E.mp4", cAlternateFileName="")) returned 1 [0103.859] FindNextFileW (in: hFindFile=0xdd1050, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.859] FindClose (in: hFindFile=0xdd1050 | out: hFindFile=0xdd1050) returned 1 [0103.860] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0d50 [0103.861] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb5ebeb0, ftCreationTime.dwHighDateTime=0x1d5d0e9, ftLastAccessTime.dwLowDateTime=0x45edc700, ftLastAccessTime.dwHighDateTime=0x1d5d346, ftLastWriteTime.dwLowDateTime=0x45edc700, ftLastWriteTime.dwHighDateTime=0x1d5d346, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.862] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 1 [0103.863] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BauUvkVwffW", cAlternateFileName="BAUUVK~1")) returned 1 [0103.864] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5816b730, ftCreationTime.dwHighDateTime=0x1d5d2cd, ftLastAccessTime.dwLowDateTime=0x752ea110, ftLastAccessTime.dwHighDateTime=0x1d5d38c, ftLastWriteTime.dwLowDateTime=0x752ea110, ftLastWriteTime.dwHighDateTime=0x1d5d38c, nFileSizeHigh=0x0, nFileSizeLow=0x13f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpP49yaduB.mp3", cAlternateFileName="BPP49Y~1.MP3")) returned 1 [0103.865] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x105b2610, ftCreationTime.dwHighDateTime=0x1d5d40d, ftLastAccessTime.dwLowDateTime=0x472a2520, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x472a2520, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x544f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN1Go35bV9P3 3b.ots", cAlternateFileName="IN1GO3~1.OTS")) returned 1 [0103.866] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b320f0, ftCreationTime.dwHighDateTime=0x1d5cfe4, ftLastAccessTime.dwLowDateTime=0xff8f9b40, ftLastAccessTime.dwHighDateTime=0x1d5c809, ftLastWriteTime.dwLowDateTime=0xff8f9b40, ftLastWriteTime.dwHighDateTime=0x1d5c809, nFileSizeHigh=0x0, nFileSizeLow=0x1352d, dwReserved0=0x0, dwReserved1=0x0, cFileName="tEjJBf.m4a", cAlternateFileName="")) returned 1 [0103.867] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7813a0, ftCreationTime.dwHighDateTime=0x1d5c8f6, ftLastAccessTime.dwLowDateTime=0x76f0bfd0, ftLastAccessTime.dwHighDateTime=0x1d5cf20, ftLastWriteTime.dwLowDateTime=0x76f0bfd0, ftLastWriteTime.dwHighDateTime=0x1d5cf20, nFileSizeHigh=0x0, nFileSizeLow=0xef95, dwReserved0=0x0, dwReserved1=0x0, cFileName="wM6QsQD.m4a", cAlternateFileName="")) returned 1 [0103.868] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 1 [0104.001] FindNextFileW (in: hFindFile=0xdd0d50, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uQQT", cAlternateFileName="")) returned 0 [0104.002] FindClose (in: hFindFile=0xdd0d50 | out: hFindFile=0xdd0d50) returned 1 [0104.002] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\*.mp4", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c1d4e0, ftCreationTime.dwHighDateTime=0x1d5c868, ftLastAccessTime.dwLowDateTime=0x4615e830, ftLastAccessTime.dwHighDateTime=0x1d5d3e5, ftLastWriteTime.dwLowDateTime=0x4615e830, ftLastWriteTime.dwHighDateTime=0x1d5d3e5, nFileSizeHigh=0x0, nFileSizeLow=0x1715a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DMmlx9_Xue2bwnQn.mp4", cAlternateFileName="0DMMLX~1.MP4")) returned 0xdd04b0 [0104.003] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.004] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0104.004] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0104.005] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc2b5ee0, ftCreationTime.dwHighDateTime=0x1d5d0b3, ftLastAccessTime.dwLowDateTime=0x6ad90480, ftLastAccessTime.dwHighDateTime=0x1d5d341, ftLastWriteTime.dwLowDateTime=0x6ad90480, ftLastWriteTime.dwHighDateTime=0x1d5d341, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.006] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 1 [0104.006] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0104.007] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 0 [0104.007] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0104.008] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\*.mp4", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b14e30, ftCreationTime.dwHighDateTime=0x1d5d469, ftLastAccessTime.dwLowDateTime=0xcf9460d0, ftLastAccessTime.dwHighDateTime=0x1d5d095, ftLastWriteTime.dwLowDateTime=0xcf9460d0, ftLastWriteTime.dwHighDateTime=0x1d5d095, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlDtZz4UCp.mp4", cAlternateFileName="HLDTZZ~1.MP4")) returned 0xdd0570 [0104.008] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69da0040, ftCreationTime.dwHighDateTime=0x1d5cefd, ftLastAccessTime.dwLowDateTime=0x207396d0, ftLastAccessTime.dwHighDateTime=0x1d5cac2, ftLastWriteTime.dwLowDateTime=0x207396d0, ftLastWriteTime.dwHighDateTime=0x1d5cac2, nFileSizeHigh=0x0, nFileSizeLow=0x5970, dwReserved0=0x0, dwReserved1=0x0, cFileName="udDHWmLl.mp4", cAlternateFileName="")) returned 1 [0104.009] FindNextFileW (in: hFindFile=0xdd0570, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.009] FindClose (in: hFindFile=0xdd0570 | out: hFindFile=0xdd0570) returned 1 [0104.009] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd0cf0 [0104.011] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e3b7440, ftCreationTime.dwHighDateTime=0x1d5d402, ftLastAccessTime.dwLowDateTime=0xd20c99f2, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd20c99f2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.011] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1e41097, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd1e41097, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1feb5cf, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wCk2jY-mhp 4kf.png.gesd", cAlternateFileName="5WCK2J~1.GES")) returned 1 [0104.012] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iAsPdh", cAlternateFileName="")) returned 1 [0104.013] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77524e90, ftCreationTime.dwHighDateTime=0x1d5c97f, ftLastAccessTime.dwLowDateTime=0x2de69d50, ftLastAccessTime.dwHighDateTime=0x1d5c9cb, ftLastWriteTime.dwLowDateTime=0x2de69d50, ftLastWriteTime.dwHighDateTime=0x1d5c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ojN3_4b9I.ods", cAlternateFileName="OJN3_4~1.ODS")) returned 1 [0104.013] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64269dc0, ftCreationTime.dwHighDateTime=0x1d5cc50, ftLastAccessTime.dwLowDateTime=0x3f6b46c0, ftLastAccessTime.dwHighDateTime=0x1d5cdfe, ftLastWriteTime.dwLowDateTime=0x3f6b46c0, ftLastWriteTime.dwHighDateTime=0x1d5cdfe, nFileSizeHigh=0x0, nFileSizeLow=0xcae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pd91QuTfc.pptx", cAlternateFileName="PD91QU~1.PPT")) returned 1 [0104.014] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 1 [0104.014] FindNextFileW (in: hFindFile=0xdd0cf0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9cc870, ftCreationTime.dwHighDateTime=0x1d5d17f, ftLastAccessTime.dwLowDateTime=0xaa94fd90, ftLastAccessTime.dwHighDateTime=0x1d5cf72, ftLastWriteTime.dwLowDateTime=0xaa94fd90, ftLastWriteTime.dwHighDateTime=0x1d5cf72, nFileSizeHigh=0x0, nFileSizeLow=0x4c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYU4AQAx-.bmp", cAlternateFileName="VYU4AQ~1.BMP")) returned 0 [0104.015] FindClose (in: hFindFile=0xdd0cf0 | out: hFindFile=0xdd0cf0) returned 1 [0104.015] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\*.mp4", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0104.016] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd09f0 [0104.016] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8f147c0, ftCreationTime.dwHighDateTime=0x1d5d498, ftLastAccessTime.dwLowDateTime=0xd282496c, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd282496c, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.017] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925d2880, ftCreationTime.dwHighDateTime=0x1d5d501, ftLastAccessTime.dwLowDateTime=0xc0ecca90, ftLastAccessTime.dwHighDateTime=0x1d5d400, ftLastWriteTime.dwLowDateTime=0xc0ecca90, ftLastWriteTime.dwHighDateTime=0x1d5d400, nFileSizeHigh=0x0, nFileSizeLow=0x104d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nmuFawmyF8Kax9ajbeC.mp3", cAlternateFileName="7NMUFA~1.MP3")) returned 1 [0104.018] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd213c1da, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd213c1da, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd27198a2, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x165d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAS hfLZwYJsat.png.gesd", cAlternateFileName="EASHFL~1.GES")) returned 1 [0104.018] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 1 [0104.018] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59106100, ftCreationTime.dwHighDateTime=0x1d5c92b, ftLastAccessTime.dwLowDateTime=0x45872590, ftLastAccessTime.dwHighDateTime=0x1d5caf9, ftLastWriteTime.dwLowDateTime=0x45872590, ftLastWriteTime.dwHighDateTime=0x1d5caf9, nFileSizeHigh=0x0, nFileSizeLow=0x15659, dwReserved0=0x0, dwReserved1=0x0, cFileName="W4C6DPiHdTcXc7sF.mp3", cAlternateFileName="W4C6DP~1.MP3")) returned 0 [0104.019] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0104.019] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\_uQQT\\iAsPdh\\*.mp4", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0104.020] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*", lpFindFileData=0x96e370 | out: lpFindFileData=0x96e370*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xdd04b0 [0104.021] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe72d84a0, ftCreationTime.dwHighDateTime=0x1d5ce16, ftLastAccessTime.dwLowDateTime=0xd2b6c041, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.021] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510f2ab0, ftCreationTime.dwHighDateTime=0x1d5cf41, ftLastAccessTime.dwLowDateTime=0x58188a00, ftLastAccessTime.dwHighDateTime=0x1d5c85b, ftLastWriteTime.dwLowDateTime=0x58188a00, ftLastWriteTime.dwHighDateTime=0x1d5c85b, nFileSizeHigh=0x0, nFileSizeLow=0xd649, dwReserved0=0x0, dwReserved1=0x0, cFileName="143G.csv", cAlternateFileName="")) returned 1 [0104.022] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184b41b, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd184b41b, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd1a15166, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x8190, dwReserved0=0x0, dwReserved1=0x0, cFileName="beYTvemo WHyub.gif.gesd", cAlternateFileName="BEYTVE~1.GES")) returned 1 [0104.023] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd28bd392, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0xd28bd392, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xd2b6c041, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0xa8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVui.docx.gesd", cAlternateFileName="EVUIDO~1.GES")) returned 1 [0104.023] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 1 [0104.024] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 1 [0104.025] FindNextFileW (in: hFindFile=0xdd04b0, lpFindFileData=0x96e3a0 | out: lpFindFileData=0x96e3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875e7b0, ftCreationTime.dwHighDateTime=0x1d5d70c, ftLastAccessTime.dwLowDateTime=0xf4543a60, ftLastAccessTime.dwHighDateTime=0x1d5d5e7, ftLastWriteTime.dwLowDateTime=0xf4543a60, ftLastWriteTime.dwHighDateTime=0x1d5d5e7, nFileSizeHigh=0x0, nFileSizeLow=0x12464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ndLNa1bY.wav", cAlternateFileName="")) returned 0 [0104.025] FindClose (in: hFindFile=0xdd04b0 | out: hFindFile=0xdd04b0) returned 1 [0104.026] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\*.mp4", lpFindFileData=0x96e3f0 | out: lpFindFileData=0x96e3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09ba8b0, ftCreationTime.dwHighDateTime=0x1d5ccf3, ftLastAccessTime.dwLowDateTime=0x65011da0, ftLastAccessTime.dwHighDateTime=0x1d5ccb0, ftLastWriteTime.dwLowDateTime=0x65011da0, ftLastWriteTime.dwHighDateTime=0x1d5ccb0, nFileSizeHigh=0x0, nFileSizeLow=0xf646, dwReserved0=0x0, dwReserved1=0x0, cFileName="MWmNERoZILn0Ybcr4.mp4", cAlternateFileName="MWMNER~1.MP4")) returned 0xdd09f0 [0104.034] FindNextFileW (in: hFindFile=0xdd09f0, lpFindFileData=0x96e420 | out: lpFindFileData=0x96e420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.034] FindClose (in: hFindFile=0xdd09f0 | out: hFindFile=0xdd09f0) returned 1 [0104.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e680) returned 1 [0104.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e640) returned 1 [0104.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4.gesd", lpFilePart=0x0) returned 0x2e [0104.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0104.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\3h9gaz7jvqxnr.mp4.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0104.046] GetFileType (hFile=0x88) returned 0x1 [0104.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0104.046] GetFileType (hFile=0x88) returned 0x1 [0104.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4", lpFilePart=0x0) returned 0x29 [0104.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0104.221] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\3h9gaz7jvqxnr.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0104.221] GetFileType (hFile=0x324) returned 0x1 [0104.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0104.221] GetFileType (hFile=0x324) returned 0x1 [0104.221] ReadFile (in: hFile=0x324, lpBuffer=0x2bb5d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb5d78*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.237] ReadFile (in: hFile=0x324, lpBuffer=0x2bb5d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb5d78*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.238] WriteFile (in: hFile=0x88, lpBuffer=0x2bb6f90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb6f90*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.241] ReadFile (in: hFile=0x324, lpBuffer=0x2bb5d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb5d78*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.241] WriteFile (in: hFile=0x88, lpBuffer=0x2bb6f90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb6f90*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.242] ReadFile (in: hFile=0x324, lpBuffer=0x2bb5d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb5d78*, lpNumberOfBytesRead=0x96e748*=0xfc, lpOverlapped=0x0) returned 1 [0104.242] WriteFile (in: hFile=0x88, lpBuffer=0x2bb6f90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bb6f90*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.243] ReadFile (in: hFile=0x324, lpBuffer=0x2bb5d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bb5d78*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0104.243] CloseHandle (hObject=0x324) returned 1 [0104.244] WriteFile (in: hFile=0x88, lpBuffer=0x2bb6f90*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2bb6f90*, lpNumberOfBytesWritten=0x96e648*=0x100, lpOverlapped=0x0) returned 1 [0104.247] CloseHandle (hObject=0x88) returned 1 [0104.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4", lpFilePart=0x0) returned 0x29 [0104.380] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\3H9gaz7jvQxnR.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\3h9gaz7jvqxnr.mp4")) returned 1 [0104.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4.gesd", lpFilePart=0x0) returned 0x29 [0104.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0104.384] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\qztd6h5e.mp4.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0104.384] GetFileType (hFile=0x88) returned 0x1 [0104.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0104.385] GetFileType (hFile=0x88) returned 0x1 [0104.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4", lpFilePart=0x0) returned 0x24 [0104.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0104.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\qztd6h5e.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0104.578] GetFileType (hFile=0x324) returned 0x1 [0104.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0104.578] GetFileType (hFile=0x324) returned 0x1 [0104.578] ReadFile (in: hFile=0x324, lpBuffer=0x2c8fe18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c8fe18*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.702] ReadFile (in: hFile=0x324, lpBuffer=0x2c8fe18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2c8fe18*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.703] WriteFile (in: hFile=0x88, lpBuffer=0x2c91030*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2c91030*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.728] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.784] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.785] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.786] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.787] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.787] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.788] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.788] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.789] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.790] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.790] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.791] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.797] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.798] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.798] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.799] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.799] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.800] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.800] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.801] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.802] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.802] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.803] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.803] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.804] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.804] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.804] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.805] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.806] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.806] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.807] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.807] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.892] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.893] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.894] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0104.894] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.895] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x394, lpOverlapped=0x0) returned 1 [0104.895] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.896] ReadFile (in: hFile=0x324, lpBuffer=0x2abee28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2abee28*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0104.896] CloseHandle (hObject=0x324) returned 1 [0104.896] WriteFile (in: hFile=0x88, lpBuffer=0x2abfe58*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2abfe58*, lpNumberOfBytesWritten=0x96e648*=0x3a0, lpOverlapped=0x0) returned 1 [0104.897] CloseHandle (hObject=0x88) returned 1 [0104.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4", lpFilePart=0x0) returned 0x24 [0104.937] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\qZTD6h5E.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\qztd6h5e.mp4")) returned 1 [0104.955] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4.gesd", lpFilePart=0x0) returned 0x3f [0104.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0104.955] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\0dmmlx9_xue2bwnqn.mp4.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0104.956] GetFileType (hFile=0x88) returned 0x1 [0104.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0104.956] GetFileType (hFile=0x88) returned 0x1 [0105.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4", lpFilePart=0x0) returned 0x3a [0105.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0105.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\0dmmlx9_xue2bwnqn.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0105.221] GetFileType (hFile=0x324) returned 0x1 [0105.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0105.221] GetFileType (hFile=0x324) returned 0x1 [0105.221] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.315] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.316] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.319] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.319] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.320] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.320] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.321] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.321] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.323] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.323] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.324] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.324] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.325] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.325] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.326] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.326] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.327] ReadFile (in: hFile=0x324, lpBuffer=0x2b92070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2b92070*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.327] WriteFile (in: hFile=0x88, lpBuffer=0x2b93288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2b93288*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.352] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.352] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.414] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.414] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.415] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.415] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.416] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.417] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.417] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.418] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.418] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.419] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.420] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.420] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.421] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.421] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.422] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.422] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.423] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.423] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.424] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.424] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.425] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.425] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.426] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0105.426] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.426] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x15a, lpOverlapped=0x0) returned 1 [0105.427] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.427] ReadFile (in: hFile=0x324, lpBuffer=0x2aab058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aab058*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0105.427] CloseHandle (hObject=0x324) returned 1 [0105.428] WriteFile (in: hFile=0x88, lpBuffer=0x2aac088*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2aac088*, lpNumberOfBytesWritten=0x96e648*=0x160, lpOverlapped=0x0) returned 1 [0105.428] CloseHandle (hObject=0x88) returned 1 [0105.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4", lpFilePart=0x0) returned 0x3a [0105.434] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\0DMmlx9_Xue2bwnQn.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\0dmmlx9_xue2bwnqn.mp4")) returned 1 [0105.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4.gesd", lpFilePart=0x0) returned 0x44 [0105.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0105.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\bauuvkvwffw\\hldtzz4ucp.mp4.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0105.491] GetFileType (hFile=0x88) returned 0x1 [0105.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0105.491] GetFileType (hFile=0x88) returned 0x1 [0106.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4", lpFilePart=0x0) returned 0x3f [0106.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0106.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\bauuvkvwffw\\hldtzz4ucp.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0106.939] GetFileType (hFile=0x324) returned 0x1 [0106.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0106.940] GetFileType (hFile=0x324) returned 0x1 [0106.940] ReadFile (in: hFile=0x324, lpBuffer=0x2ad94c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ad94c8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0106.960] ReadFile (in: hFile=0x324, lpBuffer=0x2ad94c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ad94c8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0106.961] WriteFile (in: hFile=0x88, lpBuffer=0x2ada6e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ada6e0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0106.965] ReadFile (in: hFile=0x324, lpBuffer=0x2ad94c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ad94c8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0106.966] WriteFile (in: hFile=0x88, lpBuffer=0x2ada6e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ada6e0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0106.967] ReadFile (in: hFile=0x324, lpBuffer=0x2ad94c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ad94c8*, lpNumberOfBytesRead=0x96e748*=0xf20, lpOverlapped=0x0) returned 1 [0106.967] WriteFile (in: hFile=0x88, lpBuffer=0x2ada6e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ada6e0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0106.968] ReadFile (in: hFile=0x324, lpBuffer=0x2ad94c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2ad94c8*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0106.968] CloseHandle (hObject=0x324) returned 1 [0106.968] WriteFile (in: hFile=0x88, lpBuffer=0x2ada6e0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2ada6e0*, lpNumberOfBytesWritten=0x96e648*=0xf20, lpOverlapped=0x0) returned 1 [0106.969] CloseHandle (hObject=0x88) returned 1 [0107.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4", lpFilePart=0x0) returned 0x3f [0107.074] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\hlDtZz4UCp.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\bauuvkvwffw\\hldtzz4ucp.mp4")) returned 1 [0107.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4.gesd", lpFilePart=0x0) returned 0x42 [0107.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0107.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\bauuvkvwffw\\uddhwmll.mp4.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0107.118] GetFileType (hFile=0x88) returned 0x1 [0107.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0107.119] GetFileType (hFile=0x88) returned 0x1 [0107.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4", lpFilePart=0x0) returned 0x3d [0107.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0107.297] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\bauuvkvwffw\\uddhwmll.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0107.298] GetFileType (hFile=0x324) returned 0x1 [0107.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0107.298] GetFileType (hFile=0x324) returned 0x1 [0107.298] ReadFile (in: hFile=0x324, lpBuffer=0x2bcfa70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bcfa70*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.317] ReadFile (in: hFile=0x324, lpBuffer=0x2bcfa70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bcfa70*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.317] WriteFile (in: hFile=0x88, lpBuffer=0x2bd0c88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bd0c88*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.322] ReadFile (in: hFile=0x324, lpBuffer=0x2bcfa70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bcfa70*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.322] WriteFile (in: hFile=0x88, lpBuffer=0x2bd0c88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bd0c88*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.323] ReadFile (in: hFile=0x324, lpBuffer=0x2bcfa70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bcfa70*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.323] WriteFile (in: hFile=0x88, lpBuffer=0x2bd0c88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bd0c88*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.325] ReadFile (in: hFile=0x324, lpBuffer=0x2bcfa70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bcfa70*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.325] WriteFile (in: hFile=0x88, lpBuffer=0x2bd0c88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bd0c88*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.326] ReadFile (in: hFile=0x324, lpBuffer=0x2bcfa70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bcfa70*, lpNumberOfBytesRead=0x96e748*=0x970, lpOverlapped=0x0) returned 1 [0107.326] WriteFile (in: hFile=0x88, lpBuffer=0x2bd0c88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2bd0c88*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.327] ReadFile (in: hFile=0x324, lpBuffer=0x2bcfa70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2bcfa70*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0107.327] CloseHandle (hObject=0x324) returned 1 [0107.327] WriteFile (in: hFile=0x88, lpBuffer=0x2bd0c88*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2bd0c88*, lpNumberOfBytesWritten=0x96e648*=0x970, lpOverlapped=0x0) returned 1 [0107.329] CloseHandle (hObject=0x88) returned 1 [0107.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4", lpFilePart=0x0) returned 0x3d [0107.332] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4x-aHVjSuhGt\\BauUvkVwffW\\udDHWmLl.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\4x-ahvjsuhgt\\bauuvkvwffw\\uddhwmll.mp4")) returned 1 [0107.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4.gesd", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4.gesd", lpFilePart=0x0) returned 0x43 [0107.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0107.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4.gesd" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\mwmneroziln0ybcr4.mp4.gesd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x88 [0107.336] GetFileType (hFile=0x88) returned 0x1 [0107.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0107.336] GetFileType (hFile=0x88) returned 0x1 [0107.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4", nBufferLength=0x105, lpBuffer=0x96e0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4", lpFilePart=0x0) returned 0x3e [0107.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e5c0) returned 1 [0107.810] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\mwmneroziln0ybcr4.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x324 [0107.811] GetFileType (hFile=0x324) returned 0x1 [0107.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e530) returned 1 [0107.811] GetFileType (hFile=0x324) returned 0x1 [0107.812] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.877] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.878] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.881] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.881] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.882] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.883] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.884] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.884] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.885] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.885] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.886] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.886] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.887] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.887] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.888] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.888] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.889] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.889] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.890] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.891] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.892] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.892] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.893] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.893] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0107.894] ReadFile (in: hFile=0x324, lpBuffer=0x2afc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2afc0d8*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0107.895] WriteFile (in: hFile=0x88, lpBuffer=0x2afd2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2afd2f0*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0108.021] ReadFile (in: hFile=0x324, lpBuffer=0x2aaf268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaf268*, lpNumberOfBytesRead=0x96e748*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] WriteFile (in: hFile=0x88, lpBuffer=0x2ab0298*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab0298*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] ReadFile (in: hFile=0x324, lpBuffer=0x2aaf268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaf268*, lpNumberOfBytesRead=0x96e748*=0x646, lpOverlapped=0x0) returned 1 [0108.023] WriteFile (in: hFile=0x88, lpBuffer=0x2ab0298*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x96e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2ab0298*, lpNumberOfBytesWritten=0x96e6a8*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] ReadFile (in: hFile=0x324, lpBuffer=0x2aaf268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x96e748, lpOverlapped=0x0 | out: lpBuffer=0x2aaf268*, lpNumberOfBytesRead=0x96e748*=0x0, lpOverlapped=0x0) returned 1 [0108.023] CloseHandle (hObject=0x324) returned 1 [0108.024] WriteFile (in: hFile=0x88, lpBuffer=0x2ab0298*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x96e648, lpOverlapped=0x0 | out: lpBuffer=0x2ab0298*, lpNumberOfBytesWritten=0x96e648*=0x650, lpOverlapped=0x0) returned 1 [0108.024] CloseHandle (hObject=0x88) returned 1 [0108.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4", nBufferLength=0x105, lpBuffer=0x96e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4", lpFilePart=0x0) returned 0x3e [0108.029] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\eQq0M5fMwGq3zz4_\\MWmNERoZILn0Ybcr4.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\eqq0m5fmwgq3zz4_\\mwmneroziln0ybcr4.mp4")) returned 1 [0108.087] CoTaskMemAlloc (cb=0x20c) returned 0xdbda50 [0108.087] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0xdbda50 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0108.088] CoTaskMemFree (pv=0xdbda50) [0108.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x96e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0108.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ THIS!!!!.txt", nBufferLength=0x105, lpBuffer=0x96e0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ THIS!!!!.txt", lpFilePart=0x0) returned 0x29 [0108.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x96e600) returned 1 [0108.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ THIS!!!!.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\read this!!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x88 [0108.316] GetFileType (hFile=0x88) returned 0x1 [0108.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x96e570) returned 1 [0108.317] GetFileType (hFile=0x88) returned 0x1 [0108.326] WriteFile (in: hFile=0x88, lpBuffer=0x2aef7e0*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x96e6d8, lpOverlapped=0x0 | out: lpBuffer=0x2aef7e0*, lpNumberOfBytesWritten=0x96e6d8*=0x77, lpOverlapped=0x0) returned 1 [0108.330] CloseHandle (hObject=0x88) returned 1 [0108.331] CoTaskMemAlloc (cb=0x20c) returned 0xdbd3f0 [0108.331] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0xdbd3f0 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0108.331] CoTaskMemFree (pv=0xdbd3f0) [0108.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x96e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0108.419] LocalAlloc (uFlags=0x0, uBytes=0x54) returned 0xdd09f0 [0122.151] LocalFree (hMem=0xdd6320) returned 0x0 [0122.152] LocalFree (hMem=0xdd09f0) returned 0x0 [0122.162] CoGetContextToken (in: pToken=0x96f4a0 | out: pToken=0x96f4a0) returned 0x0 [0122.162] CObjectContext::QueryInterface () returned 0x0 [0122.162] CObjectContext::GetCurrentThreadType () returned 0x0 [0122.162] Release () returned 0x0 [0122.165] CoGetContextToken (in: pToken=0x96efa0 | out: pToken=0x96efa0) returned 0x0 [0122.165] CObjectContext::QueryInterface () returned 0x0 [0122.165] CObjectContext::GetCurrentThreadType () returned 0x0 [0122.165] Release () returned 0x0 [0122.167] CoGetContextToken (in: pToken=0x96efa0 | out: pToken=0x96efa0) returned 0x0 [0122.167] CObjectContext::QueryInterface () returned 0x0 [0122.167] CObjectContext::GetCurrentThreadType () returned 0x0 [0122.167] Release () returned 0x0 [0122.544] CoGetContextToken (in: pToken=0x96efa0 | out: pToken=0x96efa0) returned 0x0 [0122.544] CObjectContext::QueryInterface () returned 0x0 [0122.544] CObjectContext::GetCurrentThreadType () returned 0x0 [0122.544] Release () returned 0x0 [0122.548] CoGetContextToken (in: pToken=0x96efc0 | out: pToken=0x96efc0) returned 0x0 [0122.548] CObjectContext::QueryInterface () returned 0x0 [0122.548] CObjectContext::GetCurrentThreadType () returned 0x0 [0122.548] Release () returned 0x0 [0122.549] CoUninitialize () Thread: id = 2 os_tid = 0x1050 Thread: id = 3 os_tid = 0x1060 Thread: id = 4 os_tid = 0x1074 [0088.362] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0088.362] RoInitialize () returned 0x1 [0088.362] RoUninitialize () returned 0x0 [0122.193] CloseHandle (hObject=0x4f4) returned 1 [0122.547] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 5 os_tid = 0x113c [0108.497] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0110.157] RoInitialize () returned 0x1 [0110.157] RoUninitialize () returned 0x0 [0110.173] ShellExecuteExW (in: pExecInfo=0x2af1118*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="notepad.exe", lpParameters="C:\\Users\\FD1HVy\\Desktop\\READ THIS!!!!.txt", lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2af1118*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="notepad.exe", lpParameters="C:\\Users\\FD1HVy\\Desktop\\READ THIS!!!!.txt", lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x4f4)) returned 1 [0121.618] CoGetContextToken (in: pToken=0x1b34f4d0 | out: pToken=0x1b34f4d0) returned 0x0 [0121.622] CoUninitialize () Thread: id = 6 os_tid = 0x1020 Thread: id = 7 os_tid = 0x105c Thread: id = 8 os_tid = 0xe88 Thread: id = 9 os_tid = 0xf58 Thread: id = 10 os_tid = 0xf60 Thread: id = 11 os_tid = 0x360 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4ef15000" os_pid = "0x5b0" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000f253" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 12 os_tid = 0x988 Thread: id = 13 os_tid = 0x820 Thread: id = 14 os_tid = 0x734 Thread: id = 15 os_tid = 0x6e8 Thread: id = 16 os_tid = 0x76c Thread: id = 17 os_tid = 0x690 Thread: id = 18 os_tid = 0x680 Thread: id = 19 os_tid = 0x614 Thread: id = 20 os_tid = 0x610 Thread: id = 21 os_tid = 0x60c Thread: id = 22 os_tid = 0x5b4 Process: id = "3" image_name = "notepad.exe" filename = "c:\\windows\\system32\\notepad.exe" page_root = "0x44bb7000" os_pid = "0x72c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13dc" cmd_line = "\"C:\\Windows\\System32\\notepad.exe\" C:\\Users\\FD1HVy\\Desktop\\READ THIS!!!!.txt" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 23 os_tid = 0x11ac Thread: id = 24 os_tid = 0x11d0 Thread: id = 25 os_tid = 0x8d4 Thread: id = 26 os_tid = 0x758 Thread: id = 27 os_tid = 0x7dc