Server.exe
Windows Exe (x86-32)
Created at 2019-07-07T11:30:00
Monitored Processes
Behavior Information - Sequential View
Process #1: server.exe
40617
0
| Information | Value |
|---|---|
| ID | #1 |
| File Name | c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe |
| Command Line | "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe" |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:25, Reason: Analysis Target |
| Unmonitor | End Time: 00:02:26, Reason: Self Terminated |
| Monitor Duration | 00:02:00 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x6a8 |
| Parent PID | 0x45c (c:\windows\explorer.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
4F0
0x
314
0x
6BC
0x
7B4
0x
C4
0x
128
0x
640
|
Memory Dumps
| Name | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| server.exe | 0x00400000 | 0x0066FFFF | Content Changed | - | 32-bit | 0x0066FE7C, 0x0044B600 |
|
|
|
| server.exe | 0x00400000 | 0x0066FFFF | Content Changed | - | 32-bit | 0x0044B616 |
|
|
|
| buffer | 0x00020000 | 0x00022FFF | First Execution | - | 32-bit | 0x00021084, 0x00020A8C |
|
|
|
| server.exe | 0x00400000 | 0x0066FFFF | Process Termination | - | 32-bit | - |
|
|
|
Dropped Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| C:\ProgramData\00000000.pky | 272 bytes |
MD5:
049fe6fd685d3e73b464d842c8690e93
SHA1: 322cbaf1f8c319a7d3317d68651a1ab28191b9b7 SHA256: 36157b42aa4a6825d0a0198f53f44e3fdbf29f5466bebc7f5a8d94284b9ec349 SSDeep: 6:LrT681JDym5xnMiF+zqp63G1I7QgwpiWC6+ajtnuDC81s:LrLDrf+GcGyUgdWC3YAW |
|
|
| C:\ProgramData\00000000.eky | 1.11 KB |
MD5:
c15465f5c27eaa402b9cea2291757af6
SHA1: 0ffcaa5fbc20a270db7fdddec8b1180b5a08bae1 SHA256: bdad5a9468d8f7e52285026a49a981d0b69fb02028f6a226bbeed36c8499535d SSDeep: 24:eyfvjO7twURBrQBk8u5Z7ADAemhoYTlEfdnL4rAcdAgp:eKjO6URVMcemhoYRQLUAhs |
|
|
| C:\/Boot/BOOTSTAT.DAT | 64.14 KB |
MD5:
19790032d93cc0cbe8e156442bd653f6
SHA1: b766a1522a49571c4e83ef4b996356858d7e15cd SHA256: 11c42a95057e99ce845e028eadb8957f4338882a5ae616f7789563b19a9194ae SSDeep: 1536:ZulDED8RN0Zg6xVmHAF6nzJdJFSMGwdUIRrfk8GIm:Qlj0awVtCvJIMGwdUI1VC |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab | 16.19 MB |
MD5:
27f9ce0c848c58c0c073ad2671339f49
SHA1: 3fe6436c19c8a6be492af9734febcd7b53cfbcff SHA256: 50402431a3e2b6d98806acc83dfe538f6a4b7d908782b751f55aa810e4677ae7 SSDeep: 196608:yCzeViaCfRAGEPtZBG2L05wxxjG/Tvj1TwXUE4tuK2jGXQNNeUnDbfeI:HnD5hqZjgwDjMThMXSUGXQNJXv |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi | 2.39 MB |
MD5:
40a387c5cfe38a2f7d9c7c4624f336dc
SHA1: f7c7b47091d2533036bd527a45759225af50fedc SHA256: d9c43352842c53ea700557c07ad2c695a033432b138aa13ccd578115b1db0e5d SSDeep: 49152:53mKgWXQ+CTw4+/q0xjfqVR+pjFtlNPoEm4BVDFZBZN0pf798m:1RgWg+TSE84ZviEVBdFDWz9r |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml | 1.67 KB |
MD5:
18b6c2e8350c8d39161c9185230be441
SHA1: c93f17569b0e10c7b35298fd9a64f45efd30c605 SHA256: 09b84b25706a0124adbcbfac8e67d55c8decea849a2e60a173b0e5db32e73e91 SSDeep: 48:H1sVaVay1AKJrqZjcEmd50JhDkqjC929WsqJos4:VqaV1AKJrq5ch50/DvC09Go7 |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml | 2.38 KB |
MD5:
55b364a51899c20764c963a7b7f268d8
SHA1: c45f127088c5a4a710795bd22e3fc615e8500ba6 SHA256: c89c15db19429c545fc57e0d847e51145a30d6314b0225ee151ccaa193c32f11 SSDeep: 48:GgtKnDZnfe0/3cBerTNZbBPwgR/I6KZMoXRWJ+/jmmQZf5NkTyEHSq9:Gg6f/3frdPwgR/NoXRWJiym+f7k2iz |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi | 2.39 MB |
MD5:
4e989daeae8404382649076cd3f5af06
SHA1: 93a4e9e244a0d32dc73da85bbd57fc6444e0e3e9 SHA256: c1a79e79ab6312d5879760667871f228609d4cfc1ebdfc0e4840a5f8a15d66f6 SSDeep: 49152:dnTp3E1XE1vWaV8plF86EVk2uFcOt9SOKiOdTBhOD6sEG:dn13E1XVpD8lkYuublYGa |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml | 1.56 KB |
MD5:
cac4eea06f14b852d563e82974ff3fb6
SHA1: 770b47b5921da527b5aca1eadea9054c2e8b12c0 SHA256: c3a5cc27007d57e4c7c6c3863ec08789cbe4c53f67bd5c5169c1c981c9b66d38 SSDeep: 24:PqRTYqAdUsz97gXiIyjIVwE2APvUjKFYNgEaExjUz3/0YucbVkPOk484YAb:PqRTY7HpMiIyjIZGKFLEae0348Cp9Ab |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab | 67.10 MB |
MD5:
20326e05b05e019e6a35a4ea38ca9249
SHA1: 90efe53a280519f6e7b5d60f40e5dc669cd67dbd SHA256: 95f0719a1c78f628424e36721d6809e2266bb45696365ff33e0c2d9781c8325e SSDeep: 196608:rorGuK/4DfPBH7M1lnaSoUbibhKpEGBn9lQei2FF3mrN37+B3fWuQcbza:r4GuKUpo1VWUYhz+9lQezVQ+B7QcC |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml | 1.98 KB |
MD5:
6239115cd6f41bc0885c8c8fadc350d9
SHA1: 080ca27006886e304c6cef7469a9ab9b3b86fcf5 SHA256: fafb8aeaf5a8c681c31ae9995f9247ee35f403d138aaa570ab09b6a06b5c9148 SSDeep: 48:tfBUJwGh0QFxeXLrgqSVRx+HmKM4Myb+ftS0N:tfyvSCA+glMEb+VS0N |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab | 9.50 MB |
MD5:
f7cc060aeb1ca56fb2bdab3e2e061045
SHA1: 31416ff52a273ab8fc74c1032e123b1b2ddb565e SHA256: 0f04ea4f456f64379613e9fe8e219e70fdf2ab5e26f3bc73e2de1627c60e1f41 SSDeep: 196608:HJCz8gom/J+V/2j9qJ/ggAjrlqMFRW9xVerlWvo:pC4gP+V/wqJ1AFyxArV |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi | 2.40 MB |
MD5:
fc101d77714b00b2bd9230776f218604
SHA1: 7e16ffef6bdc7e11fb161fd3245cd5cf2c5429c9 SHA256: 884ddaadf0bf80d619fa835a12b5561c6ab1f224e935d17a298f485650472a51 SSDeep: 49152:KUx2Uu26PJiSfmIzkdzANNv5CxHfFCcu2vSKG7FHQzRfvbu/y:WLP7pkxANnCxHME+wFfJ |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml | 1.56 KB |
MD5:
bb7622e1569291521fde43030d709ccb
SHA1: b3bc37aabb6dc91bc0de038a6aef5fc9c4b99f65 SHA256: 5696f0b38abd50758bddff6877d923b4709cc2aaab361cedea83e8070d498951 SSDeep: 48:bfpe1rYpS/zLC9t4x6kjAuDSux9J56kHZ:bfpe1CS/stLuDSuPv6o |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml | 1.71 KB |
MD5:
12e41e4f8bc6432e5f23351072619944
SHA1: 541b0650519bc2a355434600bd503b2df6b15130 SHA256: 7a8434855c96fe8e2de80348ed55fd4e85f163633b580777b26551b830631ff2 SSDeep: 48:xqE71HiBqOOHyjIWtTzvArzQf0t1h/gFAPuizP3G0t:x/AtI+XvazQMF |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab | 14.13 MB |
MD5:
769255d357566db9fa3496651015ef74
SHA1: 20f63e4e55c4b4de205f22bafda940583d7261fe SHA256: c758947e90c004b7440a3817e112aee88e9e84de9a6ac443dd94ff9092d2ded7 SSDeep: 196608:cbKtuWJUfjH6FM9l0tQLCe9A1GQJktw2nJGhyqoztZUh2+h1hFrxjkYe5UasC:cbKUgUfjH6ynl9EkthGE33YL5xjkt2al |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi | 2.73 MB |
MD5:
0d986e33e408dde632780cd127334c7f
SHA1: 7140da0411d2d9c440693172cac8498fe3e174c2 SHA256: e93b038eb1ac0a86ef95ef10f80cf5e0324578d3fa8125dcce75202ba3850c3d SSDeep: 49152:AhQsBC0Lvt04fm90sbuSexle0DeAQy69iMYleKiXAqyWkahBlh/zhaeaR:AAcvNfoXuSg699aZCLyWkIFbCR |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml | 3.25 KB |
MD5:
f56da8f4312b313a4415a462671e81df
SHA1: 6921d4bfbed06a8321e89219331d33a839161d4b SHA256: f7af09e38c87e4d5988733c3987b4504deb6f9b0aabd829ea9eace4942c9eef4 SSDeep: 96:H6JYPm4OLRNolima1xcZHoySSFoIhH6WvDxb:HNP9OLRNolifBGhaWvDB |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml | 4.25 KB |
MD5:
a98971d04183769a0f3250c085c6208f
SHA1: 708d35cec3c5abce53b1d3a02c4f0d4e4cd47890 SHA256: e62dc2e8c233e976e3a2dddc8d2af6172f1c3d30b6142d7feb5e4beecb0d0672 SSDeep: 96:FvOgc65EpCnpX1FVekNu0p/e60uSYwzVfNHAG88TEVjXCwleZ0T0zD5fZz//JCVB:FDZ5Epeplq0pGiQz1NldTEVj50Z0T0zI |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml | 2.51 KB |
MD5:
4b0bf9268c6bc3051cce90b629f43cb9
SHA1: 04b482e0681caad75f7b753736e020d1e695b8a6 SHA256: 6d656b740141bb4d4cb6113a9493aebccc0dd110cba9ad3832c298e14bc81abb SSDeep: 48:ygdQfI/reRzOpbD6XhC4F11bJVBkEJW9MJlJDDWmsYpvFZolv:bdp6RzUbD6XhJFRm9MJ2IpNy |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab | 41.78 MB |
MD5:
25ed8bf86de64bad6c00d629d6c23671
SHA1: 017d708c4de3174a30125a9c4059a8de7caefb5a SHA256: 4f55cb4cfb57f038e54f981666786b36df39b13e124444848058dfad8c393238 SSDeep: 196608:+SwmFEFqqcUKQOanz1uYmjM+llQ/KKj6MJZ6Pb/qtAGB0dqDfku:+OEwqvBmimMJsQ/ku |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi | 2.41 MB |
MD5:
dca0f8ddd262703cd55e78e8a927d149
SHA1: e9035808e9842ab8544ae66033d161652c8621a8 SHA256: fb701c67b88e7d7fddc480078a127532db286394fcaa8ea77139a329a05dcdfe SSDeep: 49152:3plK1nGQL/avXgkX5WyKy9bmNdmGPPya0bZEhwyTPT0D1k3afTNA:G1nGQL6QkX5WyKwbadmSPyaoUPohk3aa |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml | 1.90 KB |
MD5:
f1cbe7c0d4344329b2bc8f48ed728e43
SHA1: 773cbb10ca548cae99eeec133dbb63687df7cd01 SHA256: 5d860612029a0f1a0a214c05908c0529f8e97caffaa6a98690feb632c47104aa SSDeep: 48:ULPDIMDFo1EBY/fg+sES7maJfdoeUAf7s1:KJFoKp+sES7mahWvAf7Q |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi | 848.64 KB |
MD5:
be53edd5aef843d0750f31d03eab9964
SHA1: 6b3a4aaf3372c7b60b9b0791ef12996596968a0d SHA256: f87b5bf698efe6cb1331f352f969fe6bc112525c1ed98866e558a7c9f8ecfeff SSDeep: 12288:K9mmrP4zCtRvDyds9xmslgtq62o4ppa2J5/BN4WoJfWEHlVnBOYbFzPVpPNENj:cz4zEDySr6tq62hk2J5gXfb3DFzLO |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml | 955 bytes |
MD5:
f21a64352d2f9361c3a39bfecbcbaabc
SHA1: c95c15f197346f3d6c4b354e1799d439dd076195 SHA256: 0207edd6bb8c4437227193a7e6e0a18da74a59193db51391e63c938889fd653c SSDeep: 24:MEAyDfyQ4rZ9G+6tNYhxpmdorgeLFZhcglM84AWZ2vBpt:yyTVokYpRgUPhvlMzAWZ2vBpt |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml | 5.89 KB |
MD5:
fc0af0fbf8593dffa558cb9896f0b4c6
SHA1: 7f75a010de633307051a86e92f0969cc92e74df5 SHA256: 541a84ccd1124c3ccfe2052b761fd871c15ca6b60160f15f91429a8c880efe19 SSDeep: 96:d5VX9q82VGLpOeHh4ANotgsX8LBzQZtn3aTeM31vCrsqwUFriV0Ig7Eu86pgcEAP:dNgGVOeHh4AitgssLFQfvM3V+wUFmI7R |
|
|
| C:\/Boot\@ READ ME TO RECOVER FILES @.txt | 4.46 KB |
MD5:
a4f3499d58eeb37cd8df0c9a366f0ec7
SHA1: 58580343950a3fbe601d7fa30636e30693a6dc6a SHA256: 6f7ffc9e5389bc4b1c62d511938422cb3f92f4a08f3ecef53814bb46ec174b02 SSDeep: 96:q6jOZzXAFAm4VwsUvyf/AaSOAnGR/wZhL30RMid:jjOqFLRsOOuYwTD0RMid |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab | 10.95 MB |
MD5:
c4d85e75f29e0a33a9f81816bbb4b10b
SHA1: 8af314f1801b8dec9d89e5779b5c3f7e727df2cb SHA256: 916d430c36055b471a0d0668069be080053ad570518c6fedcb3214dfa4905286 SSDeep: 98304:paA7CRd53m8vEuwze9Bk6O5Inzumn/OsU9JMj3vBqsCVZIUp:paKCRd53Ide7J6mnmsULIpqZVZ5p |
|
|
Modified Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| C:\/Boot/BOOTSTAT.DAT | 64.00 KB |
MD5:
027ff27dfd3530e64dd3bdf26e6befcd
SHA1: 383a2fc3ba8fa37d3c5d02d82560c242827f401b SHA256: 7ce7ef2bc597b53e9f4668837d6ef1e86dc79d5d5c33309b8e0fc6949e555d11 SSDeep: 1536:ZulDED8RN0Zg6xVmHAF6nzJdJFSMGwdUIRrfk8GIt:Qlj0awVtCvJIMGwdUI1Vx |
|
|
| C:\/Boot/BOOTSTAT.DAT | 64.14 KB |
MD5:
19790032d93cc0cbe8e156442bd653f6
SHA1: b766a1522a49571c4e83ef4b996356858d7e15cd SHA256: 11c42a95057e99ce845e028eadb8957f4338882a5ae616f7789563b19a9194ae SSDeep: 1536:ZulDED8RN0Zg6xVmHAF6nzJdJFSMGwdUIRrfk8GIm:Qlj0awVtCvJIMGwdUI1VC |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab | 16.19 MB |
MD5:
27f9ce0c848c58c0c073ad2671339f49
SHA1: 3fe6436c19c8a6be492af9734febcd7b53cfbcff SHA256: 50402431a3e2b6d98806acc83dfe538f6a4b7d908782b751f55aa810e4677ae7 SSDeep: 196608:yCzeViaCfRAGEPtZBG2L05wxxjG/Tvj1TwXUE4tuK2jGXQNNeUnDbfeI:HnD5hqZjgwDjMThMXSUGXQNJXv |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi | 2.39 MB |
MD5:
08a0edd30bd84fa412aaaa8af9a7d8b5
SHA1: 35088847f8eece3bf8a26b594682071b5bf228ec SHA256: 0ca07019b42559c21aba8a7f1a02d97f9b6a36af13f5f482869acb8262ee3e3e SSDeep: 49152:53mKgWXQ+CTw4+/q0xjfqVR+pjFtlNPoEm4BVDFZBZN0pf798a:1RgWg+TSE84ZviEVBdFDWz9T |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi | 2.39 MB |
MD5:
40a387c5cfe38a2f7d9c7c4624f336dc
SHA1: f7c7b47091d2533036bd527a45759225af50fedc SHA256: d9c43352842c53ea700557c07ad2c695a033432b138aa13ccd578115b1db0e5d SSDeep: 49152:53mKgWXQ+CTw4+/q0xjfqVR+pjFtlNPoEm4BVDFZBZN0pf798m:1RgWg+TSE84ZviEVBdFDWz9r |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml | 1.53 KB |
MD5:
37ac32595896315ee63795ef918bebf0
SHA1: 699d915d8c72d426a881541f075d662494be3fea SHA256: e5685f096b08e92d340fb7cfb12e1f1a37368956ab470f4c1fc37c3eff75fee6 SSDeep: 48:H1sVaVay1AKJrqZjcEmd50JhDkqjC929WsqJH:VqaV1AKJrq5ch50/DvC09GH |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml | 1.67 KB |
MD5:
18b6c2e8350c8d39161c9185230be441
SHA1: c93f17569b0e10c7b35298fd9a64f45efd30c605 SHA256: 09b84b25706a0124adbcbfac8e67d55c8decea849a2e60a173b0e5db32e73e91 SSDeep: 48:H1sVaVay1AKJrqZjcEmd50JhDkqjC929WsqJos4:VqaV1AKJrq5ch50/DvC09Go7 |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml | 2.24 KB |
MD5:
471416522284a9764dbe423fd5145bb1
SHA1: 673af79f0fdd295fa57011e0043cde3368d3a7e3 SHA256: 459377c9ca5a16508c6c969976f4ea364e99c3bb2123284ecf753a30b30fb195 SSDeep: 48:GgtKnDZnfe0/3cBerTNZbBPwgR/I6KZMoXRWJ+/jmmQZf5NkTyZ:Gg6f/3frdPwgR/NoXRWJiym+f7k2Z |
|
|
| C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml | 2.38 KB |
MD5:
55b364a51899c20764c963a7b7f268d8
SHA1: c45f127088c5a4a710795bd22e3fc615e8500ba6 SHA256: c89c15db19429c545fc57e0d847e51145a30d6314b0225ee151ccaa193c32f11 SSDeep: 48:GgtKnDZnfe0/3cBerTNZbBPwgR/I6KZMoXRWJ+/jmmQZf5NkTyEHSq9:Gg6f/3frdPwgR/NoXRWJiym+f7k2iz |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi | 2.39 MB |
MD5:
24fd8c5c97891c3edee42154a0fb3be0
SHA1: e64fcc5c789f4dc13e2aea10379e868532a29485 SHA256: 04f236461b703a34beb929832505ed3187b1908fdcb63e9a5c0d462d739c5e3b SSDeep: 49152:dnTp3E1XE1vWaV8plF86EVk2uFcOt9SOKiOdTBhOD6sEU:dn13E1XVpD8lkYuublYGY |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi | 2.39 MB |
MD5:
4e989daeae8404382649076cd3f5af06
SHA1: 93a4e9e244a0d32dc73da85bbd57fc6444e0e3e9 SHA256: c1a79e79ab6312d5879760667871f228609d4cfc1ebdfc0e4840a5f8a15d66f6 SSDeep: 49152:dnTp3E1XE1vWaV8plF86EVk2uFcOt9SOKiOdTBhOD6sEG:dn13E1XVpD8lkYuublYGa |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml | 1.42 KB |
MD5:
7795565091536da2c77098241388e5d9
SHA1: 3090c77b8088867f2d82d38ea4543aea6f2b7c66 SHA256: 002ad4dc902f931077a86c9edf0d80d4bf07c721209169466f6dbe696b40da5f SSDeep: 24:PqRTYqAdUsz97gXiIyjIVwE2APvUjKFYNgEaExjUz3/0YucbVkP4:PqRTY7HpMiIyjIZGKFLEae0348CA |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml | 1.56 KB |
MD5:
cac4eea06f14b852d563e82974ff3fb6
SHA1: 770b47b5921da527b5aca1eadea9054c2e8b12c0 SHA256: c3a5cc27007d57e4c7c6c3863ec08789cbe4c53f67bd5c5169c1c981c9b66d38 SSDeep: 24:PqRTYqAdUsz97gXiIyjIVwE2APvUjKFYNgEaExjUz3/0YucbVkPOk484YAb:PqRTY7HpMiIyjIZGKFLEae0348Cp9Ab |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab | 67.10 MB |
MD5:
20326e05b05e019e6a35a4ea38ca9249
SHA1: 90efe53a280519f6e7b5d60f40e5dc669cd67dbd SHA256: 95f0719a1c78f628424e36721d6809e2266bb45696365ff33e0c2d9781c8325e SSDeep: 196608:rorGuK/4DfPBH7M1lnaSoUbibhKpEGBn9lQei2FF3mrN37+B3fWuQcbza:r4GuKUpo1VWUYhz+9lQezVQ+B7QcC |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml | 1.84 KB |
MD5:
bd4caa5ee04d8c0261debe836517c1b1
SHA1: 5a69eca8ec8d250edf056e0125aeb4a80701f811 SHA256: 130b4a80b99a068e9cb097937d9015bfeed1540394dfca8995858a2fa8ab6580 SSDeep: 48:tfBUJwGh0QFxeXLrgqSVRx+HmKM4Myb+fJ:tfyvSCA+glMEb+h |
|
|
| C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml | 1.98 KB |
MD5:
6239115cd6f41bc0885c8c8fadc350d9
SHA1: 080ca27006886e304c6cef7469a9ab9b3b86fcf5 SHA256: fafb8aeaf5a8c681c31ae9995f9247ee35f403d138aaa570ab09b6a06b5c9148 SSDeep: 48:tfBUJwGh0QFxeXLrgqSVRx+HmKM4Myb+ftS0N:tfyvSCA+glMEb+VS0N |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab | 9.50 MB |
MD5:
7527b1966a06f17f29c624f6b6b4c1a7
SHA1: 097aedece5229ba2326f4ba5ffe3cc95892ca422 SHA256: 89d7e111d41f541774706d405f5aca9b31b61468f6ac0877d24aaad55c826c31 SSDeep: 196608:HJCz8gom/J+V/2j9qJ/ggAjrlqMFRW9xVerlWv7:pC4gP+V/wqJ1AFyxArm |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab | 9.50 MB |
MD5:
f7cc060aeb1ca56fb2bdab3e2e061045
SHA1: 31416ff52a273ab8fc74c1032e123b1b2ddb565e SHA256: 0f04ea4f456f64379613e9fe8e219e70fdf2ab5e26f3bc73e2de1627c60e1f41 SSDeep: 196608:HJCz8gom/J+V/2j9qJ/ggAjrlqMFRW9xVerlWvo:pC4gP+V/wqJ1AFyxArV |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi | 2.40 MB |
MD5:
32c5bd3876cff4d786e8455c83d06321
SHA1: fbf6daa0219180c729382e97910dee1246f72edc SHA256: 7f0a8615133596c2a559ddee3839e4f9ef1280d7b4c4d81a723dcfcf9708bdd2 SSDeep: 49152:KUx2Uu26PJiSfmIzkdzANNv5CxHfFCcu2vSKG7FHQzRfvbu/i:WLP7pkxANnCxHME+wFfx |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi | 2.40 MB |
MD5:
fc101d77714b00b2bd9230776f218604
SHA1: 7e16ffef6bdc7e11fb161fd3245cd5cf2c5429c9 SHA256: 884ddaadf0bf80d619fa835a12b5561c6ab1f224e935d17a298f485650472a51 SSDeep: 49152:KUx2Uu26PJiSfmIzkdzANNv5CxHfFCcu2vSKG7FHQzRfvbu/y:WLP7pkxANnCxHME+wFfJ |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml | 1.42 KB |
MD5:
8e720aec22623210921a7bc0ee996ab5
SHA1: e2ac3d2b96b402c66eeca25921ea7681821edf11 SHA256: 8c3fd2cadcf8308249112e5bcf04ff2e0c4c4ce28c97964f6edae62f4c43d1c6 SSDeep: 24:bfpWQQ1vDQ7dprGoOHnTZV1YmM99t4x2DkyUhZ2tZuNykm3nWhWKezmAynY0r:bfpe1rYpS/zLC9t4x6kjAuDSux9J5r |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml | 1.56 KB |
MD5:
bb7622e1569291521fde43030d709ccb
SHA1: b3bc37aabb6dc91bc0de038a6aef5fc9c4b99f65 SHA256: 5696f0b38abd50758bddff6877d923b4709cc2aaab361cedea83e8070d498951 SSDeep: 48:bfpe1rYpS/zLC9t4x6kjAuDSux9J56kHZ:bfpe1CS/stLuDSuPv6o |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml | 1.57 KB |
MD5:
4533149398acbbc9c682730a2def558e
SHA1: 7102b0ff62884e09c53a22d8624fa0c77bb96cd3 SHA256: 1c4ea445a981e098bfd94277e94583b84f9ccc88c9b0fd129877455b8f0b8ddb SSDeep: 48:xqE71HiBqOOHyjIWtTzvArzQf0t1h/gFAPuizP3I:x/AtI+XvazQMM |
|
|
| C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml | 1.71 KB |
MD5:
12e41e4f8bc6432e5f23351072619944
SHA1: 541b0650519bc2a355434600bd503b2df6b15130 SHA256: 7a8434855c96fe8e2de80348ed55fd4e85f163633b580777b26551b830631ff2 SSDeep: 48:xqE71HiBqOOHyjIWtTzvArzQf0t1h/gFAPuizP3G0t:x/AtI+XvazQMF |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab | 14.13 MB |
MD5:
769255d357566db9fa3496651015ef74
SHA1: 20f63e4e55c4b4de205f22bafda940583d7261fe SHA256: c758947e90c004b7440a3817e112aee88e9e84de9a6ac443dd94ff9092d2ded7 SSDeep: 196608:cbKtuWJUfjH6FM9l0tQLCe9A1GQJktw2nJGhyqoztZUh2+h1hFrxjkYe5UasC:cbKUgUfjH6ynl9EkthGE33YL5xjkt2al |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi | 2.73 MB |
MD5:
4e538a6b31deda244ab76d2f92a18b38
SHA1: dab193a27d838ea0a18ab9d0796885e13f8dca55 SHA256: 666e1bb50f8385e0ad91c9d5207be0a93004bb288c206cb09462095cead75b95 SSDeep: 49152:AhQsBC0Lvt04fm90sbuSexle0DeAQy69iMYleKiXAqyWkahBlh/zhaeaf:AAcvNfoXuSg699aZCLyWkIFbCf |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi | 2.73 MB |
MD5:
0d986e33e408dde632780cd127334c7f
SHA1: 7140da0411d2d9c440693172cac8498fe3e174c2 SHA256: e93b038eb1ac0a86ef95ef10f80cf5e0324578d3fa8125dcce75202ba3850c3d SSDeep: 49152:AhQsBC0Lvt04fm90sbuSexle0DeAQy69iMYleKiXAqyWkahBlh/zhaeaR:AAcvNfoXuSg699aZCLyWkIFbCR |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml | 3.11 KB |
MD5:
d3db17b70f90d5930d55f6eb6f89aafb
SHA1: 6cea538aba69a2bdd7581d91480c81c42d8cff4f SHA256: fa50e2f2192bfbf1019c354ea2f4a9a1aa725273758441f9dd9995ba26059773 SSDeep: 96:H6JYPm4OLRNolima1xcZHoySSFoIhH6WvDxy:HNP9OLRNolifBGhaWvDs |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml | 3.25 KB |
MD5:
f56da8f4312b313a4415a462671e81df
SHA1: 6921d4bfbed06a8321e89219331d33a839161d4b SHA256: f7af09e38c87e4d5988733c3987b4504deb6f9b0aabd829ea9eace4942c9eef4 SSDeep: 96:H6JYPm4OLRNolima1xcZHoySSFoIhH6WvDxb:HNP9OLRNolifBGhaWvDB |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml | 4.11 KB |
MD5:
a6b7194b256cac798018a094278db8fb
SHA1: a0e53e09049f6f3e0180eed2f1780e8b4014e3a6 SHA256: 62848ea3b77261cc1dec4f6c1c9574364d0008e2c3f28e069e5c0a4e7ffb87f1 SSDeep: 96:FvOgc65EpCnpX1FVekNu0p/e60uSYwzVfNHAG88TEVjXCwleZ0T0zD5fZz//Jp:FDZ5Epeplq0pGiQz1NldTEVj50Z0T0zL |
|
|
| C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml | 4.25 KB |
MD5:
a98971d04183769a0f3250c085c6208f
SHA1: 708d35cec3c5abce53b1d3a02c4f0d4e4cd47890 SHA256: e62dc2e8c233e976e3a2dddc8d2af6172f1c3d30b6142d7feb5e4beecb0d0672 SSDeep: 96:FvOgc65EpCnpX1FVekNu0p/e60uSYwzVfNHAG88TEVjXCwleZ0T0zD5fZz//JCVB:FDZ5Epeplq0pGiQz1NldTEVj50Z0T0zI |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml | 2.37 KB |
MD5:
4eaff416cf29707e09dd75561dd052c3
SHA1: 5b18579d0259a8a3238982c106b31f148b9215c8 SHA256: 279116328b88731bfeda784216d15e15e2d83086a12790038fa21e4db7ebb130 SSDeep: 48:ygdQfI/reRzOpbD6XhC4F11bJVBkEJW9MJlJDDWmsYpB:bdp6RzUbD6XhJFRm9MJ2IpB |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml | 2.51 KB |
MD5:
4b0bf9268c6bc3051cce90b629f43cb9
SHA1: 04b482e0681caad75f7b753736e020d1e695b8a6 SHA256: 6d656b740141bb4d4cb6113a9493aebccc0dd110cba9ad3832c298e14bc81abb SSDeep: 48:ygdQfI/reRzOpbD6XhC4F11bJVBkEJW9MJlJDDWmsYpvFZolv:bdp6RzUbD6XhJFRm9MJ2IpNy |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab | 41.78 MB |
MD5:
25ed8bf86de64bad6c00d629d6c23671
SHA1: 017d708c4de3174a30125a9c4059a8de7caefb5a SHA256: 4f55cb4cfb57f038e54f981666786b36df39b13e124444848058dfad8c393238 SSDeep: 196608:+SwmFEFqqcUKQOanz1uYmjM+llQ/KKj6MJZ6Pb/qtAGB0dqDfku:+OEwqvBmimMJsQ/ku |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi | 2.41 MB |
MD5:
3900862f37322dd79cdb6763fee1385e
SHA1: e865ea806cf01160445a0bdd268a04413f079187 SHA256: 4683bb36f0b41913967b24d94e40e9ca5b1f004449fe8e46f79bf8155e7c6fbe SSDeep: 49152:3plK1nGQL/avXgkX5WyKy9bmNdmGPPya0bZEhwyTPT0D1k3afTNh:G1nGQL6QkX5WyKwbadmSPyaoUPohk3an |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi | 2.41 MB |
MD5:
dca0f8ddd262703cd55e78e8a927d149
SHA1: e9035808e9842ab8544ae66033d161652c8621a8 SHA256: fb701c67b88e7d7fddc480078a127532db286394fcaa8ea77139a329a05dcdfe SSDeep: 49152:3plK1nGQL/avXgkX5WyKy9bmNdmGPPya0bZEhwyTPT0D1k3afTNA:G1nGQL6QkX5WyKwbadmSPyaoUPohk3aa |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml | 1.76 KB |
MD5:
5ee563265aa5b80ab0ba3f95514188a5
SHA1: 6e69d6b9506ec009852c62d3e53655574a1d591d SHA256: 1eabdd6d848af6807b7861d1479d08cbd3e200d19e874322cce39f9299da1cea SSDeep: 48:ULPDIMDFo1EBY/fg+sES7maJfdoeUAf7B:KJFoKp+sES7mahWvAf7B |
|
|
| C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml | 1.90 KB |
MD5:
f1cbe7c0d4344329b2bc8f48ed728e43
SHA1: 773cbb10ca548cae99eeec133dbb63687df7cd01 SHA256: 5d860612029a0f1a0a214c05908c0529f8e97caffaa6a98690feb632c47104aa SSDeep: 48:ULPDIMDFo1EBY/fg+sES7maJfdoeUAf7s1:KJFoKp+sES7mahWvAf7Q |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi | 848.50 KB |
MD5:
305e36c7d1cce9e9725fc5f9d8e07e67
SHA1: e6deddc19efa450c5c53e574f4b75cd2972f9814 SHA256: 205769a948875e29b2d6d19043eb70c379790b8f87677d7e4510c7ad577ffc56 SSDeep: 12288:K9mmrP4zCtRvDyds9xmslgtq62o4ppa2J5/BN4WoJfWEHlVnBOYbFzPVpPNENr:cz4zEDySr6tq62hk2J5gXfb3DFzLS |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi | 848.64 KB |
MD5:
be53edd5aef843d0750f31d03eab9964
SHA1: 6b3a4aaf3372c7b60b9b0791ef12996596968a0d SHA256: f87b5bf698efe6cb1331f352f969fe6bc112525c1ed98866e558a7c9f8ecfeff SSDeep: 12288:K9mmrP4zCtRvDyds9xmslgtq62o4ppa2J5/BN4WoJfWEHlVnBOYbFzPVpPNENj:cz4zEDySr6tq62hk2J5gXfb3DFzLO |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml | 811 bytes |
MD5:
cdbc2106601d828869c89e928d20a220
SHA1: c7f8af94952cae5e7364f65fec687397f9c4442d SHA256: 65cd534774173acb439a28f3599a95f529a25349ab7b18bc6c7c1596aadfa752 SSDeep: 24:MEAyDfyQ4rZ9G+6tNYhxpmdorgeLFZhcglM84AWZx:yyTVokYpRgUPhvlMzAWZx |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml | 955 bytes |
MD5:
f21a64352d2f9361c3a39bfecbcbaabc
SHA1: c95c15f197346f3d6c4b354e1799d439dd076195 SHA256: 0207edd6bb8c4437227193a7e6e0a18da74a59193db51391e63c938889fd653c SSDeep: 24:MEAyDfyQ4rZ9G+6tNYhxpmdorgeLFZhcglM84AWZ2vBpt:yyTVokYpRgUPhvlMzAWZ2vBpt |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml | 5.75 KB |
MD5:
ad7c2ee93a82aefdde76d548fd96f08e
SHA1: 0b0609c572e17f65252c8fab91bc593227ee47df SHA256: ab12fa51ecf04ae40491aaf8a3bd8254fae73557aabe8f3d23da55fe8bce5525 SSDeep: 96:d5VX9q82VGLpOeHh4ANotgsX8LBzQZtn3aTeM31vCrsqwUFriV0Ig7Eu86pgcEAA:dNgGVOeHh4AitgssLFQfvM3V+wUFmI7u |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml | 5.89 KB |
MD5:
fc0af0fbf8593dffa558cb9896f0b4c6
SHA1: 7f75a010de633307051a86e92f0969cc92e74df5 SHA256: 541a84ccd1124c3ccfe2052b761fd871c15ca6b60160f15f91429a8c880efe19 SSDeep: 96:d5VX9q82VGLpOeHh4ANotgsX8LBzQZtn3aTeM31vCrsqwUFriV0Ig7Eu86pgcEAP:dNgGVOeHh4AitgssLFQfvM3V+wUFmI7R |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab | 10.95 MB |
MD5:
17b6c8f5d19e04d8d4dad638fe6af978
SHA1: 42b2cce181aebb88a449cb82b07ede9094f0dbb4 SHA256: f336e651ac3d1e2b605378d21a68381f8fb4ffc47fbb7a8c1971fb0f0bf0c6ff SSDeep: 196608:paKCRd53Ide7J6mnmsULIpqZVZ5ZCNJNMahrgsd3hrZ8By5EnjkoA/ZmhT2:pzAdqdIJ6U3MZVHKGwFlhrZ8vjkoA/ZN |
|
|
| C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab | 10.95 MB |
MD5:
c4d85e75f29e0a33a9f81816bbb4b10b
SHA1: 8af314f1801b8dec9d89e5779b5c3f7e727df2cb SHA256: 916d430c36055b471a0d0668069be080053ad570518c6fedcb3214dfa4905286 SSDeep: 98304:paA7CRd53m8vEuwze9Bk6O5Inzumn/OsU9JMj3vBqsCVZIUp:paKCRd53Ide7J6mnmsULIpqZVZ5p |
|
|
Threads
Thread 0x4f0
1095
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Load | module_name = kernel32, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExitProcess, address_out = 0x76c37a10 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleHandleA, address_out = 0x76c31245 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CloseHandle, address_out = 0x76c31410 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenProcess, address_out = 0x76c31986 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = VirtualProtect, address_out = 0x76c3435f |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = IsDebuggerPresent, address_out = 0x76c34a5d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateFileA, address_out = 0x76c353c6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DuplicateHandle, address_out = 0x76c31886 |
|
1 | |
| Module | Load | module_name = user32, base_address = 0x74f40000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\user32.dll, function = MessageBoxA, address_out = 0x74fafd1e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\user32.dll, function = wsprintfA, address_out = 0x74f6ae5f |
|
1 | |
| Module | Load | module_name = Ntdll, base_address = 0x77130000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtSetInformationThread, address_out = 0x7714f99c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtSetInformationProcess, address_out = 0x7714fb18 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtQueryInformationProcess, address_out = 0x7714fac8 |
|
1 | |
| Process | Get Info | type = PROCESS_EXECUTE_FLAGS |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WriteFile, address_out = 0x76c31282 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WriteConsoleW, address_out = 0x76c57aca |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForSingleObject, address_out = 0x76c31136 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = VirtualQuery, address_out = 0x76c3445a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = VirtualFree, address_out = 0x76c3186e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = VirtualAlloc, address_out = 0x76c31856 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SwitchToThread, address_out = 0x76c4efec |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetWaitableTimer, address_out = 0x76c5bb2f |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetUnhandledExceptionFilter, address_out = 0x76c387c9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetProcessPriorityBoost, address_out = 0x76c4d97b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetEvent, address_out = 0x76c316c5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetErrorMode, address_out = 0x76c31b00 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetConsoleCtrlHandler, address_out = 0x76c38a09 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LoadLibraryA, address_out = 0x76c349d7 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LoadLibraryW, address_out = 0x76c3492b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetSystemInfo, address_out = 0x76c349ca |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetSystemDirectoryA, address_out = 0x76c4b66c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetStdHandle, address_out = 0x76c351b3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetQueuedCompletionStatus, address_out = 0x76c4d3c3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcessAffinityMask, address_out = 0x76c3a871 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcAddress, address_out = 0x76c31222 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetEnvironmentStringsW, address_out = 0x76c351e3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetConsoleMode, address_out = 0x76c31328 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FreeEnvironmentStringsW, address_out = 0x76c351cb |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExitProcess, address_out = 0x76c37a10 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DuplicateHandle, address_out = 0x76c31886 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateThread, address_out = 0x76c334d5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateIoCompletionPort, address_out = 0x76c4eef2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateEventA, address_out = 0x76c3328c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CloseHandle, address_out = 0x76c31410 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = AddVectoredExceptionHandler, address_out = 0x771a742b |
|
1 | |
| Module | Load | module_name = kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = AddDllDirectory, address_out = 0x0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = AddVectoredContinueHandler, address_out = 0x771937e1 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetQueuedCompletionStatusEx, address_out = 0x76cb43af |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LoadLibraryExA, address_out = 0x76c34913 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LoadLibraryExW, address_out = 0x76c3495d |
|
1 | |
| System | Get Info | type = System Directory, result_out = C:\Windows\system32 |
|
1 | |
| Module | Load | module_name = C:\Windows\system32\advapi32.dll, base_address = 0x74d40000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = SystemFunction036, address_out = 0x74d41919 |
|
1 | |
| Module | Load | module_name = C:\Windows\system32\ntdll.dll, base_address = 0x77130000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtWaitForSingleObject, address_out = 0x7714f8ac |
|
1 | |
| Module | Load | module_name = C:\Windows\system32\winmm.dll, base_address = 0x74b30000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\winmm.dll, function = timeBeginPeriod, address_out = 0x74b39ef7 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\winmm.dll, function = timeEndPeriod, address_out = 0x74b39feb |
|
1 | |
| Module | Load | module_name = C:\Windows\system32\ws2_32.dll, base_address = 0x75bc0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = WSAGetOverlappedResult, address_out = 0x75bc7489 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = wine_get_version, address_out = 0x0 |
|
1 | |
| System | Get Info | type = Hardware Information |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Module | Load | module_name = kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetStdHandle, address_out = 0x76c351b3 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetHandleInformation, address_out = 0x76c4195c |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_ERROR_HANDLE |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetSystemDirectoryW, address_out = 0x76c35063 |
|
1 | |
| System | Get Info | type = System Directory, result_out = C:\Windows\system32 |
|
1 | |
| Module | Load | module_name = C:\Windows\system32\ws2_32.dll, base_address = 0x75bc0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = WSAStartup, address_out = 0x75bc3ab2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CancelIoEx, address_out = 0x76c4efbc |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFileCompletionNotificationModes, address_out = 0x76caaeee |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = WSAEnumProtocolsW, address_out = 0x75bcc8e1 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetConsoleMode, address_out = 0x76c31328 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCommandLineW, address_out = 0x76c35223 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetEnvironmentVariableW, address_out = 0x76c31b48 |
|
1 | |
| Environment | Get Environment String | name = GODEBUG |
|
1 | |
| Module | Load | module_name = kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetStdHandle, address_out = 0x76c351b3 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetHandleInformation, address_out = 0x76c4195c |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_ERROR_HANDLE |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileAttributesExW, address_out = 0x76c34574 |
|
1 | |
| File | Get Info | filename = C:\eris.was, type = file_attributes |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateFileW, address_out = 0x76c33f5c |
|
1 | |
| File | Create | filename = C:\eris.was, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| Environment | Get Environment String | name = windir, result_out = C:\Windows |
|
1 | |
| File | Get Info | filename = C:\Windows\00000000.pky, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Windows\00000000.pky, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| Module | Load | module_name = C:\Windows\system32\advapi32.dll, base_address = 0x74d40000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = CryptAcquireContextW, address_out = 0x74d4df14 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = CryptGenRandom, address_out = 0x74d4dfc8 |
|
1 | |
| Environment | Get Environment String | name = ALLUSERSPROFILE, result_out = C:\ProgramData |
|
1 | |
| File | Create | filename = C:\ProgramData\00000000.pky, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WriteFile, address_out = 0x76c31282 |
|
1 | |
| File | Write | filename = C:\ProgramData\00000000.pky, size = 272 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CloseHandle, address_out = 0x76c31410 |
|
1 | |
| Environment | Get Environment String | name = ALLUSERSPROFILE, result_out = C:\ProgramData |
|
1 | |
| File | Create | filename = C:\ProgramData\00000000.eky, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\ProgramData\00000000.eky, size = 1135 |
|
1 | |
| File | Get Info | filename = A:\, type = file_attributes |
|
1 | |
| File | Create | filename = A:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = B:\, type = file_attributes |
|
1 | |
| File | Create | filename = B:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = C:\, type = file_attributes |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetDriveTypeW, address_out = 0x76c3418b |
|
1 | |
| File | Get Info | filename = D:\, type = file_attributes |
|
1 | |
| File | Create | filename = D:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = E:\, type = file_attributes |
|
1 | |
| File | Create | filename = E:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = F:\, type = file_attributes |
|
1 | |
| File | Create | filename = F:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = G:\, type = file_attributes |
|
1 | |
| File | Create | filename = G:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = H:\, type = file_attributes |
|
1 | |
| File | Create | filename = H:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = I:\, type = file_attributes |
|
1 | |
| File | Create | filename = I:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = J:\, type = file_attributes |
|
1 | |
| File | Create | filename = J:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = K:\, type = file_attributes |
|
1 | |
| File | Create | filename = K:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = L:\, type = file_attributes |
|
1 | |
| File | Create | filename = L:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = M:\, type = file_attributes |
|
1 | |
| File | Create | filename = M:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = N:\, type = file_attributes |
|
1 | |
| File | Create | filename = N:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = O:\, type = file_attributes |
|
1 | |
| File | Create | filename = O:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = P:\, type = file_attributes |
|
1 | |
| File | Create | filename = P:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = Q:\, type = file_attributes |
|
1 | |
| File | Create | filename = Q:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = R:\, type = file_attributes |
|
1 | |
| File | Create | filename = R:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = S:\, type = file_attributes |
|
1 | |
| File | Create | filename = S:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = T:\, type = file_attributes |
|
1 | |
| File | Create | filename = T:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = U:\, type = file_attributes |
|
1 | |
| File | Create | filename = U:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = V:\, type = file_attributes |
|
1 | |
| File | Create | filename = V:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = W:\, type = file_attributes |
|
1 | |
| File | Create | filename = W:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = X:\, type = file_attributes |
|
1 | |
| File | Create | filename = X:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = Y:\, type = file_attributes |
|
1 | |
| File | Create | filename = Y:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = Z:\, type = file_attributes |
|
1 | |
| File | Create | filename = Z:\, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = C:\, type = file_attributes |
|
1 | |
| File | Create | filename = C:\, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindFirstFileW, address_out = 0x76c34435 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindNextFileW, address_out = 0x76c354ee |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindClose, address_out = 0x76c34442 |
|
1 | |
| File | Get Info | filename = C:\/$Recycle.Bin, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/BOOTSECT.BAK, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Config.Msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Documents and Settings, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileInformationByHandle, address_out = 0x76c353ae |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings, type = attributes,time,size,volserialno |
|
1 | |
| Module | Load | module_name = C:\Windows\system32\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileInformationByHandleEx, address_out = 0x76c4c78f |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings, type = extended |
|
1 | |
| File | Get Info | filename = C:\/MSOCache, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/PerfLogs, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Program Files, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Program Files (x86), type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/ProgramData, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Recovery, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/System Volume Information, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Windows, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/bootmgr, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/hiberfil.sys, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/pagefile.sys, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/BOOTSECT.BAK, type = file_attributes |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleFileNameW, address_out = 0x76c34950 |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/BOOTSECT.BAK, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/BOOTSECT.BAK, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/bootmgr, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/hiberfil.sys, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/pagefile.sys, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileAttributesW, address_out = 0x76c31b18 |
|
1 | |
| File | Get Info | filename = C:\/Boot\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFileAttributesW, address_out = 0x76c4d4f7 |
|
1 | |
| File | Get Info | filename = C:\/Boot, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD.LOG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD.LOG1, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD.LOG2, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/BOOTSTAT.DAT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/memtest.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD.LOG, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD.LOG, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/BCD.LOG, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD.LOG1, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BCD.LOG2, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BOOTSTAT.DAT, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BOOTSTAT.DAT, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/BOOTSTAT.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileType, address_out = 0x76c33531 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BOOTSTAT.DAT, type = file_type |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFilePointerEx, address_out = 0x76c4c807 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReadFile, address_out = 0x76c33ed3 |
|
1 | |
| File | Read | filename = C:\/Boot/BOOTSTAT.DAT, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BOOTSTAT.DAT, type = file_type |
|
1 | |
| File | Create | filename = C:\/Boot/BOOTSTAT.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Boot/BOOTSTAT.DAT, size = 8388608, size_out = 65536 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BOOTSTAT.DAT, type = file_type |
|
1 | |
| File | Write | filename = C:\/Boot/BOOTSTAT.DAT, size = 65536 |
|
1 | |
| File | Get Info | filename = C:\/Boot/BOOTSTAT.DAT, type = file_type |
|
1 | |
| File | Read | filename = C:\/Boot/BOOTSTAT.DAT, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Boot/BOOTSTAT.DAT, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/BOOTSTAT.DAT, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 38 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = MoveFileExW, address_out = 0x76c49b2d |
|
1 | |
| File | Move | source_filename = C:\/Boot/BOOTSTAT.DAT, destination_filename = C:\/Boot/BOOTSTAT.DAT.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Boot/memtest.exe, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/memtest.exe, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/memtest.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/Fonts\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/chs_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/cht_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/jpn_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/kor_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/wgl4_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/chs_boot.ttf, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/chs_boot.ttf, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts/chs_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/cht_boot.ttf, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/cht_boot.ttf, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts/cht_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/jpn_boot.ttf, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/jpn_boot.ttf, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts/jpn_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/kor_boot.ttf, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/kor_boot.ttf, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts/kor_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/wgl4_boot.ttf, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/Fonts/wgl4_boot.ttf, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/Fonts/wgl4_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/cs-CZ\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/cs-CZ\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/cs-CZ\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/cs-CZ, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/cs-CZ/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/cs-CZ/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/da-DK\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/da-DK\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/da-DK\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/da-DK, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/da-DK/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/da-DK/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/de-DE\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/de-DE\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/de-DE\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/de-DE, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/de-DE/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/de-DE/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/el-GR\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/el-GR\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/el-GR\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/el-GR, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/el-GR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/el-GR/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/en-US\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/en-US\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/en-US\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/en-US, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/memtest.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/en-US/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/memtest.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/en-US/memtest.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/en-US/memtest.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/es-ES\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/es-ES\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/es-ES\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/es-ES, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/es-ES/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/es-ES/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/fi-FI\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/fi-FI\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/fi-FI\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/fi-FI, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/fi-FI/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/fi-FI/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/fr-FR\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/fr-FR\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/fr-FR\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/fr-FR, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/fr-FR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/fr-FR/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/hu-HU\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/hu-HU\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/hu-HU\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/hu-HU, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/hu-HU/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/hu-HU/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/it-IT\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/it-IT\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/it-IT\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/it-IT, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/it-IT/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/it-IT/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ja-JP\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/ja-JP\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/ja-JP\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ja-JP, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ja-JP/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ja-JP/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ko-KR\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/ko-KR\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/ko-KR\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ko-KR, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ko-KR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ko-KR/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/nb-NO\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/nb-NO\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/nb-NO\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/nb-NO, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/nb-NO/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/nb-NO/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/nl-NL\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/nl-NL\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/nl-NL\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/nl-NL, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/nl-NL/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/nl-NL/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pl-PL\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/pl-PL\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/pl-PL\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pl-PL, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pl-PL/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pl-PL/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pt-BR\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/pt-BR\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/pt-BR\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pt-BR, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-BR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pt-BR/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pt-PT\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/pt-PT\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/pt-PT\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pt-PT, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/pt-PT/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/pt-PT/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ru-RU\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/ru-RU\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/ru-RU\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ru-RU, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/ru-RU/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/ru-RU/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/sv-SE\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/sv-SE\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/sv-SE\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/sv-SE, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/sv-SE/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/sv-SE/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/tr-TR\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/tr-TR\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/tr-TR\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/tr-TR, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/tr-TR/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/tr-TR/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-CN\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/zh-CN\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/zh-CN\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-CN, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-CN/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-CN/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-HK\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/zh-HK\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/zh-HK\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-HK, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-HK/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-HK/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-TW\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Boot/zh-TW\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Boot/zh-TW\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-TW, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Boot/zh-TW/bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Boot/zh-TW/bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Config.Msi\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Config.Msi\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Config.Msi\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Config.Msi\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Config.Msi\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Config.Msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Config.Msi, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Config.Msi/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Documents and Settings\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Documents and Settings\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Documents and Settings\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Documents and Settings, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings, type = attributes,time,size,volserialno |
|
1 | |
| File | Get Info | filename = C:\/Documents and Settings, type = extended |
|
1 | |
| File | Create | filename = C:\/Documents and Settings, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 98 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, size = 8388608, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, size = 1450 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 98 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 3252880 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 3252880 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 1886 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, size = 1886 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, size = 8388608, size_out = 1569780 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, size = 1569780 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, size = 8388608, size_out = 2513920 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 94 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, size = 8388608, size_out = 5557 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, size = 5557 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 94 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, size = 8388608, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, size = 9352 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, size = 8388608, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, size = 3584 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, size = 8388608, size_out = 596341 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, size = 519584 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, size = 8388608, size_out = 655872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, size = 655872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, size = 8388608, size_out = 191872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, size = 67190 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, size = 8388608, size_out = 107912 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 103 |
|
1 | |
|
For performance reasons, the remaining 61 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x314
1
0
| Category | Operation | Information | Success | Count | Logfile |
|---|
Thread 0x6bc
2764
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, size = 2865664 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, size = 8388608, size_out = 3186 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, size = 3186 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 4207 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, size = 2928955 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, size = 6241 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 491741 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 491741 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, size = 8388608, size_out = 2797568 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, size = 2507776 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 94 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, size = 8388608, size_out = 913 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, size = 913 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 94 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, size = 1452 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, size = 8388608, size_out = 838536 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, size = 3702272 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 8388608, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 4274 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 8388608, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 1463568 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, size = 8388608, size_out = 2409472 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, size = 2409472 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 8388608, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 1992192 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, size = 20577 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 2073335 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 2073335 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, size = 8388608, size_out = 3672064 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, size = 3672064 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/Built-In Building Blocks.dotx, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/Built-In Building Blocks.dotx, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 136 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/Built-In Building Blocks.dotx, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/Built-In Building Blocks.dotx.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, size = 8388608, size_out = 2281 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, size = 2281 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 122 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, size = 8388608, size_out = 1447 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, size = 1447 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 141 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, size = 8388608, size_out = 290 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, size = 290 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 122 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, size = 8388608, size_out = 272 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, size = 272 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 124 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, size = 8388608, size_out = 221 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, size = 221 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 116 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, size = 8388608, size_out = 2269 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, size = 2269 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 142 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, size = 8388608, size_out = 1453 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, size = 1453 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 150 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, size = 8388608, size_out = 1449 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, size = 1449 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 146 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, size = 8388608, size_out = 1169 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, size = 1169 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 144 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, size = 8388608, size_out = 1228 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, size = 1228 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 149 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, size = 8388608, size_out = 1228 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, size = 1228 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 145 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, size = 8388608, size_out = 1547 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, size = 1547 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 153 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, size = 8388608, size_out = 1547 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, size = 1547 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 149 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, size = 8388608, size_out = 412 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, size = 412 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 136 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat, size = 8388608, size_out = 32768 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl, size = 37762 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, size = 8388608, size_out = 1434 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, size = 1434 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 98 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, size = 8388608, size_out = 1138 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, size = 1138 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 101 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, size = 8388608, size_out = 52 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, size = 52 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 97 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, size = 8388608, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, size = 2560 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, size = 8388608, size_out = 2466 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, size = 2466 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/CREDHIST, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/SYNCHIST, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/CREDHIST, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/SYNCHIST, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/Preferred, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/be5b4fbd-cb99-45f5-9462-5f896dd3a6b9, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/Preferred, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/be5b4fbd-cb99-45f5-9462-5f896dd3a6b9, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/02540a10-7eb7-4b20-a8c7-470f8986389c, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/0e15476d-d8fe-46ca-8099-ebdcf80f637c, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/102a7bc8-3f85-4bb4-840a-38257d2965d2, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/2be989a0-16a1-424b-9211-51aa3bb43e5d, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/Preferred, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/d45d5740-b58e-4c08-9156-55efcca76150, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/fbbe72db-afd8-443b-88dd-64b20388700d, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/02540a10-7eb7-4b20-a8c7-470f8986389c, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/0e15476d-d8fe-46ca-8099-ebdcf80f637c, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/102a7bc8-3f85-4bb4-840a-38257d2965d2, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/2be989a0-16a1-424b-9211-51aa3bb43e5d, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/Preferred, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/d45d5740-b58e-4c08-9156-55efcca76150, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/fbbe72db-afd8-443b-88dd-64b20388700d, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
|
For performance reasons, the remaining 1644 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x7b4
154
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 8388608, size_out = 195771 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 195771 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, size = 8388608, size_out = 2506240 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, size = 2506240 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, size = 8388608, size_out = 1565 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, size = 1565 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, size = 2503680 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, size = 144 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 8388608, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 1992192 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, size = 1377656 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 2678620 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 2678620 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 0 |
|
1 |
Thread 0xc4
5790
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json, size = 11094 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 176 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata/verified_contents.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_metadata, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, size = 8388608, size_out = 3213 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, size = 3213 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 156 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, size = 8388608, size_out = 143 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, size = 143 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 155 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, size = 8388608, size_out = 92 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, size = 92 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 153 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, size = 8388608, size_out = 91 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, size = 91 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 151 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, size = 8388608, size_out = 725 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, size = 725 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 157 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ro, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ru, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sr, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/th, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/tr, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/uk, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/vi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_CN, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_TW, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, size = 8388608, size_out = 246 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, size = 246 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, size = 8388608, size_out = 264 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, size = 264 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, size = 8388608, size_out = 207 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, size = 207 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, size = 8388608, size_out = 222 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, size = 222 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, size = 8388608, size_out = 216 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, size = 216 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, size = 8388608, size_out = 217 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, size = 217 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, size = 8388608, size_out = 260 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, size = 260 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, size = 8388608, size_out = 208 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, size = 208 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 172 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, size = 8388608, size_out = 209 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, size = 209 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 172 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, size = 8388608, size_out = 206 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, size = 206 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, size = 8388608, size_out = 206 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, size = 206 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 173 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, size = 8388608, size_out = 216 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, size = 216 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, size = 8388608, size_out = 216 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, size = 216 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, size = 8388608, size_out = 219 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, size = 219 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 170 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, size = 8388608, size_out = 215 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, size = 215 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, size = 8388608, size_out = 221 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, size = 221 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, size = 8388608, size_out = 279 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, size = 279 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, size = 8388608, size_out = 235 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, size = 235 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, size = 8388608, size_out = 209 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, size = 209 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, size = 8388608, size_out = 213 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, size = 213 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, size = 8388608, size_out = 221 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, size = 221 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, size = 8388608, size_out = 218 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, size = 218 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, size = 8388608, size_out = 228 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, size = 228 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, size = 8388608, size_out = 224 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, size = 224 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, size = 8388608, size_out = 207 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, size = 207 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, size = 8388608, size_out = 217 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, size = 217 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, size = 8388608, size_out = 195 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, size = 195 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, size = 8388608, size_out = 213 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, size = 213 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 169 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, size = 8388608, size_out = 206 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, size = 206 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 172 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR/messages.json.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT/messages.json, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT/messages.json, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT/messages.json, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT/messages.json, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT/messages.json, type = file_type |
|
1 | |
|
For performance reasons, the remaining 4625 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x128
15878
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, size = 2522624 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, size = 8388608, size_out = 1800 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, size = 1800 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, size = 8388608, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, size = 5884 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, size = 8388608, size_out = 3093997 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, size = 3093997 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, size = 8388608, size_out = 875520 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, size = 875520 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, size = 8388608, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, size = 1347 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, size = 8388608, size_out = 5253866 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, size = 5253866 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, size = 8388608, size_out = 881152 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, size = 881152 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, size = 8388608, size_out = 1457 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, size = 1457 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 8388608, size_out = 4287316 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 4287316 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, size = 8388608, size_out = 885760 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, size = 885760 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, size = 8388608, size_out = 1458 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, size = 1458 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 99 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, size = 8388608, size_out = 2928955 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, size = 8388608, size_out = 873984 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, size = 873984 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 96 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, size = 8388608, size_out = 1383 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, size = 1383 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 96 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 2362 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, size = 2362 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 8388608, size_out = 2097668 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 2097668 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, size = 8388608, size_out = 3124224 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, size = 9503 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, size = 8388608, size_out = 2503680 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, size = 8388608, size_out = 1606 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, size = 1606 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 8388608, size_out = 679416 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 679416 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 1988 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, size = 1988 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, size = 8388608, size_out = 8265165 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, size = 8265165 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 91 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, size = 8388608, size_out = 2511872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, size = 4095519 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, size = 8388608, size_out = 2507776 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, size = 868864 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 97 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, size = 8388608, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, size = 819 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 97 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 9352 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, size = 596341 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, size = 8388608, size_out = 526176 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, size = 526176 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe, size = 8388608, size_out = 519584 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, size = 191872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, size = 8388608, size_out = 27195 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, size = 107912 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 98 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, size = 8388608, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, size = 868864 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 97 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, size = 8388608, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, size = 819 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 97 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 2624 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, size = 2624 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccessMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccessMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608, size_out = 2850452 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 2850452 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 4274 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 8388608, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 1463568 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608, size_out = 2366464 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 2366464 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, size = 8388608, size_out = 16852 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, size = 16683 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, size = 8388608, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, size = 174440 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 88 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, size = 8388608, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, size = 7378792 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 91 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 8388608, size_out = 715834 |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 8388608, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 4274 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll, size = 8388608, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, size = 174440 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 88 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, size = 8388608, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, size = 7378792 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 91 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 8388608, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 715834 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 105 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, destination_filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe, size = 8388608, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT, size = 108824 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 81 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, size = 8388608, size_out = 1206133 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, size = 1206133 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 74 |
|
1 | |
| File | Move | source_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db, destination_filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
2 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeSysFnt10.lst, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/SharedDataEvents, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, type = file_type |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst, size = 8388608, size_out = 35116 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin, type = file_type |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin, size = 77477 |
|
1 | |
| File | Get Info | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin, type = file_type |
|
1 | |
| File | Read | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin, size = 144 |
|
1 | |
|
For performance reasons, the remaining 14404 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x640
14935
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 2296 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, size = 2296 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi, size = 8388608, size_out = 2503680 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, size = 2513920 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 97 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, size = 8388608, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, size = 1450 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 97 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 1608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, size = 1608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, size = 8388608, size_out = 6430668 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, size = 6430668 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi, size = 8388608, size_out = 2865664 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, size = 4207 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 2424 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, size = 2424 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608, size_out = 1863101 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 1863101 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 91 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi, size = 8388608, size_out = 2522624 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, size = 868864 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, size = 8388608, size_out = 811 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, size = 811 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml, destination_filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 5884 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, size = 3124224 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 96 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, size = 8388608, size_out = 1231 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, size = 1231 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 96 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 1852 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, size = 1852 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 6241 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, size = 2797568 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml, size = 8388608, size_out = 9503 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, size = 2503680 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, size = 2511872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi, destination_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, size = 8388608, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, size = 1452 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml, destination_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 1872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, size = 1872 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab, size = 8388608, size_out = 4095519 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, size = 838536 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 89 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, size = 8388608, size_out = 1857 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, size = 1857 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 108 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, size = 8388608, size_out = 5739138 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, size = 5739138 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi, size = 8388608, size_out = 3702272 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, size = 27195 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 91 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm, destination_filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm, size = 8388608, size_out = 67190 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, size = 596341 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 106 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml, destination_filename = C:\/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 2678620 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 2678620 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi, size = 8388608, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, size = 16852 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 95 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 1559515 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 1559515 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 92 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 4845105 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 4845105 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 93 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 31094 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, size = 31094 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, size = 8388608, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, size = 174440 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 88 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, size = 8388608, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, size = 7378792 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 91 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 8388608, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 715834 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 105 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, size = 8388608, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, size = 1377656 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 90 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe, destination_filename = C:\/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, file_attributes = FILE_FLAG_BACKUP_SEMANTICS |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, size = 4569 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C, desired_access = GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@ READ ME TO RECOVER FILES @.txt, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 2678620 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 2678620 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 94 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, size = 8388608, size_out = 6421 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, size = 6421 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, size = 8388608, size_out = 0 |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, desired_access = FILE_APPEND_DATA, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, size = 144 |
|
1 | |
| File | Write | filename = STD_ERROR_HANDLE, size = 94 |
|
1 | |
| File | Move | source_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml, destination_filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml.ERIS, flags = MOVEFILE_REPLACE_EXISTING |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_attributes |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, size = 1024 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_attributes |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 16, size_out = 16 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Create | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, desired_access = GENERIC_WRITE, GENERIC_READ, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Read | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608, size_out = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
| File | Write | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, size = 8388608 |
|
1 | |
| File | Get Info | filename = C:\/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab, type = file_type |
|
1 | |
|
For performance reasons, the remaining 13483 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Process #2: cmd.exe
70
0
| Information | Value |
|---|---|
| ID | #2 |
| File Name | c:\windows\syswow64\cmd.exe |
| Command Line | C:\Windows\system32\cmd.exe /C ping 127.0.0.1 -n 3 > NUL && del /Q /F "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe" |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:02:24, Reason: Child Process |
| Unmonitor | End Time: 00:02:28, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x9a0 |
| Parent PID | 0x6a8 (c:\users\5p5nrgjn0js halpmcxz\desktop\server.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
9A4
|
Threads
Thread 0x9a4
70
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-07-07 11:32:54 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 210601 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 26501537614 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\cmd.exe, base_address = 0x4a2c0000 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetThreadUILanguage, address_out = 0x76c4a84f |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
3 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
2 | |
| Environment | Get Environment String | - |
|
2 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 0, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE |
|
1 | |
| Module | Get Filename | process_name = c:\windows\syswow64\cmd.exe, file_name_orig = C:\Windows\SysWOW64\cmd.exe, size = 260 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Environment | Get Environment String | name = PROMPT |
|
1 | |
| Environment | Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Get Environment String | name = COMSPEC, result_out = C:\Windows\system32\cmd.exe |
|
1 | |
| Environment | Get Environment String | name = KEYS |
|
1 | |
| File | Get Info | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop, type = file_attributes |
|
2 | |
| Environment | Set Environment String | name = =C:, value = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CopyFileExW, address_out = 0x76c53b92 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = IsDebuggerPresent, address_out = 0x76c34a5d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetConsoleInputExeNameW, address_out = 0x76c4a79d |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
3 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Create | filename = NUL, desired_access = GENERIC_WRITE, file_attributes = FILE_ATTRIBUTE_NORMAL, share_mode = FILE_SHARE_READ |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\PING.EXE, os_pid = 0x9b4, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Environment | Set Environment String | name = COPYCMD |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Set Environment String | name = =ExitCode, value = 00000000 |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Set Environment String | name = =ExitCodeAscii |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Get Info | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe, type = file_attributes |
|
1 | |
| File | Delete | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Server.exe |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 |
Process #3: ping.exe
25
4
| Information | Value |
|---|---|
| ID | #3 |
| File Name | c:\windows\syswow64\ping.exe |
| Command Line | ping 127.0.0.1 -n 3 |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:02:24, Reason: Child Process |
| Unmonitor | End Time: 00:02:28, Reason: Self Terminated |
| Monitor Duration | 00:00:03 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x9b4 |
| Parent PID | 0x9a0 (c:\windows\syswow64\cmd.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
9B8
0x
9BC
0x
9C0
0x
9C4
|
Threads
Thread 0x9b8
25
4
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-07-07 11:32:54 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 210741 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 26519426753 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\ping.exe, base_address = 0xc20000 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters, value_name = DefaultTTL, data = 0, type = REG_NONE |
|
1 | |
| DNS | Resolve Name | host = 127.0.0.1, address_out = 127.0.0.1 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 20 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 24 |
|
1 | |
| ICMP | Send ICMP Echo | source_address = 0.0.0.0, destination_address = 127.0.0.1, timeout = 4000 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 22 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 9 |
|
3 | |
| System | Sleep | duration = 1000 milliseconds (1.000 seconds) |
|
1 | |
| ICMP | Send ICMP Echo | source_address = 0.0.0.0, destination_address = 127.0.0.1, timeout = 4000 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 22 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 9 |
|
3 | |
| System | Sleep | duration = 1000 milliseconds (1.000 seconds) |
|
1 | |
| ICMP | Send ICMP Echo | source_address = 0.0.0.0, destination_address = 127.0.0.1, timeout = 4000 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 22 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 9 |
|
3 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 92 |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 97 |
|
1 |
