rruzcj.exe
Windows Exe (x86-32)
Created at 2019-06-09T09:41:00
Monitored Processes
Behavior Information - Sequential View
Process #1: rruzcj.exe
133155
0
| Information | Value |
|---|---|
| ID | #1 |
| File Name | c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe |
| Command Line | "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rruzcj.exe" |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:27, Reason: Analysis Target |
| Unmonitor | End Time: 00:02:00, Reason: Self Terminated |
| Monitor Duration | 00:01:33 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x97c |
| Parent PID | 0x45c (c:\windows\explorer.exe) |
| Bitness | 32-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
980
0x
98C
0x
998
0x
99C
0x
9A0
0x
9A4
0x
9A8
0x
9C4
0x
9C8
0x
9CC
0x
9D0
0x
9D4
0x
9D8
0x
9DC
0x
9E0
0x
9E4
0x
9E8
0x
9F8
0x
A98
0x
B38
0x
BC8
|
Memory Dumps
| Name | Start VA | End VA | Dump Reason | PE Rebuilds | Bitness | Entry Points | AV | YARA | Actions |
|---|---|---|---|---|---|---|---|---|---|
| rruzcj.exe | 0x00400000 | 0x0049EFFF | Relevant Image | - | 32-bit | - |
|
|
|
Dropped Files
| Filename | File Size | Hash Values | YARA Match | Actions |
|---|---|---|---|---|
| C:\Boot\BOOTSTAT.DAT.id-9C354B42.[restdoc@protonmail.com].zoh | 64.25 KB |
MD5:
d7e4ca859665f98e6b5b7c37bc882447
SHA1: f2156875ff17dd0eff8a861b8112775a170776ab SHA256: 71d94ffacd765d3f6be031a048addcef8791edcf13a552df8dc939d206be14b3 SSDeep: 1536:oGQCRIAzvTMyGE6jsM4zvCkdNaeAqR0MisowkbokV2XwX5OkuCC:oiRn4FI/zaCaefRzishk0ksAxC |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.47 KB |
MD5:
feb3ca09030e0df4130dadd400f1da49
SHA1: 213782dfb7a3fcdbcfa129173f1c9280ce5a232e SHA256: 0aa0cf62c19156dfa608b98a1d6e69929fc3ae20bdd4ccf8f30b3567d5367f7d SSDeep: 48:pM+7I3nhd0LThqqS6xMst9Li9dgcp3xmD7T1K98Cnae4Q/UKaY27F:a+KURS6xMsbC3xAT1W8s4Q/UKaf5 |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.07 KB |
MD5:
051708c219c52186069332b2ed443a62
SHA1: 4a62e223204d7647eb56189993d2fe16e7b68798 SHA256: e2b4e6120d4322dc8e7b585769968d31f1788883712f0be0e0193437d118889b SSDeep: 48:U5TBW26PcOxaZv40MEbqu1nvnKNZN+rZLfSmbIfZLj2ViYv7F:Axh1winvnKNZMFSNLzK5 |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
41cab2ab83296b372279af5d47e0c361
SHA1: de0ceef3c1eddb7a086e9352367b1580092ee803 SHA256: a786eaa36f68236f52e838be48cff88defbb791a44f4291096ba650b7eb7a828 SSDeep: 48:OY7Ks8GAAIEdLFM1EnuxUaNVqMBnCZ9FFgriv/jKte2m7V:8sOn3kkn6juiv/ZJ |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.76 KB |
MD5:
d23822e197b42b74d057d5488e35a412
SHA1: 8acf16d953773a37d23d552518332b1259c636e1 SHA256: 91ec3901d6730e7b05dd7b0f7b867b5f235fb40192e7c944d51cbdcc4fdecb85 SSDeep: 48:MH2Zy/niu6Q3Hb8uEA/f0RmYpUubUe2GF7r:sow6QiFmvubX3 |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 3.36 KB |
MD5:
02fefcc423b586e09844f51252be04af
SHA1: d186955a8a8d3430452704c8ff294c04607284ed SHA256: a53193c57fa15bc410b5ac3aed6105195dd11f19894fecbb70181357a3a0c070 SSDeep: 96:ft9ebYbgX/W93OwtmeuzMOdlc7uS8QmcnLvEAL:6bYb0gXXWDKt |
|
|
| C:\BOOTSECT.BAK.id-9C354B42.[restdoc@protonmail.com].zoh | 8.25 KB |
MD5:
f73044504780f881566f23c4dda97461
SHA1: f1becafb0753d2f65ffeb9ef018ba64049e378d6 SHA256: c7caee26d95f30b0f0c9fad78eec899512696ffbf4fa185cbc1ff1ff9fb46f11 SSDeep: 192:3n3EjNDCRcDgq3XhnFmGUvoR1XNoGfGhHOP4xUZpArvdpE9C:nEFCRcf3Rn0GUmdo5dyPAhi9C |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.80 KB |
MD5:
add512e5d8f4129381110a52bca41467
SHA1: a646ea6928e37be937b243429b3f8144ef15c0a4 SHA256: 7474f0d90c772bdbd0b91e295c7732d542dedcbca89e186a14b87717c80315d7 SSDeep: 48:1XNp2renuFyWEqcCFf1g+2cU8O9rItCQK4+venMV0XWgNihYE7F:ZSeulOEU8GItCQKvveMVUV8hN5 |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
c4c931c955ce08333e258d642041cc43
SHA1: 11ba660a585901aaab8f3c6dc23f3b23ea87a419 SHA256: 996b40bc6ea015fbe4f709ef511ecac7789186a2d8da4abe4010453876f4cdae SSDeep: 48:e6ljXFPs2G8EYulru4yBueZyRmABJfqLUnHe2x7T:e6lJPsQUlq9lyRm4JfgI3f |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.55 KB |
MD5:
d907f6915bad4bb9dd7d5837e5a21ddf
SHA1: 4838da4dcd534ee68969b2c547ca6a75e6b60d3f SHA256: ff5e30940363d8d42be4d9f677d66db5d8754f031081ce5bdad614364ac5c853 SSDeep: 24:1IcFajqub+mf02/OCjID2XdoBJxyArRIknllk+/6rF8a5CckI9cd+yXeoF:1xOCmf0244gJxymISlvyt5C8P27F |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
e15e397c51d3baf101e4c99d5a664e72
SHA1: ca0a1b38ca4fe44f6f2e7c784323718e91f01270 SHA256: 8ab23ad6ab46915ddbd5ad4f4db9143647fb69f8983bef5d714a745f72c8b827 SSDeep: 48:2so8JYjNi+b1CVkda3iWVSUKRHP9w7N2pi7F:2sVeNfh5a3iMS5q95 |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
dd9a22eeacee7f785b3138a2f0d7c99a
SHA1: 47708aa6374f457c2c1a1c146c9ec5395e3bf7a0 SHA256: bc422763817b07ce483c74f9c6c988e744acebbd4f259faa65912c3f3fdfc3c8 SSDeep: 48:LNiAVapbXy0SN1nXrIekCkHGF3x3Hsw+MAwMel87F:L4AcpJQVrTkmFhcwNQeq5 |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 4.33 KB |
MD5:
e6ea9ba7b57669775220743b0759bdcc
SHA1: 9b13e8624ecc3f390da2e1b42c5409ae6093cc1f SHA256: 369a3f7a632006005401095545999bd3c36508f5b1ef61f35ac1c846301cabdb SSDeep: 96:Zk6ZvMKdjRQMwlt5ZAoJacn+T4e/gDP7640xevXdpb5:ZDUWWJ5ZjZ+T1/EPqmtD |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 5.97 KB |
MD5:
5f9f105b1348a389b831ddc56dc596ae
SHA1: 09241f32c85d36d24b5ab663e2fb578d6965382e SHA256: 92f6ad561ac06793c08e24040cf45cec413af0e5d22fadbb930473e8b250d704 SSDeep: 96:9A4ecTIUmCfcEnxFKC0FxqInlHo6NfNvsHOiIgPBQHRlcpvlsLq/4jEu5:5Rm4ccKBnZnlHo6N1vsHyeBARlcpvCmW |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.60 KB |
MD5:
6386baaa734730045cbbd4b2dbf74a23
SHA1: 0a5e7d24f0b3e9a29780309b2646511ab16376f4 SHA256: 0f0e45c22a98bfd9ffb6e15a967339a21c3d3a4b3591a2ab5e8be62a07bbebef SSDeep: 24:fm3W92/gi1w6BI5yD3d3HpXEKu8df+GU9mIZCS5Apnk2le2yoM7eop:RtQGiVJUwV3IZls1e2BI7p |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.54 KB |
MD5:
0450846d0ec59bb14407055ab32f944b
SHA1: 5afd1a886c03c8bb12588638d9bfd8acb1c8a9aa SHA256: b2544a1f72ea35a328633c1679b74e94468a0b0b496a3b55cc55c8d34cad660a SSDeep: 48:SJ1cJXU073f5S3VCZdwf6eq2YeycQ9yO1o/j9KdQP/1lAMYL7F:SDcX73fpwf6TkOS79jX1KMm5 |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.99 KB |
MD5:
c1ede5b2eae5cf0211859492ad7bece3
SHA1: 70c863bf3e7a7de5dc32b5463ab320faa06071d7 SHA256: 34a946dca9020a823c6119816a18c59e54ca96aaf362c5d797df240de8a586ff SSDeep: 48:rXbfT6Z71OJtchYMUKd7W28DoyulzvT9Ze2WYj7B:brT6JIJtbMbo2EoyyvTvjN |
|
|
| C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.04 KB |
MD5:
20a18d4805cc80225c1959daf68e2cab
SHA1: 32e3f4769ead56f0d434ad4be7cb02e5d30cac02 SHA256: c593e86e6bd4e619e5ed10fe1cf78e52b67f685dacbf5d4210abf21ec7cb3c4f SSDeep: 24:ix6KaqXBTs7GyAWQWJQg+LiW/sC26Zk7Q0W4T87f3fd1cZ7V7MryY1E5AkdtQito:jmlMvYLQIN0H8zfEvMxEeQjYj7F |
|
|
| C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 6.33 KB |
MD5:
f2f1013e533749af281bd818218f879a
SHA1: 5b4d6f60a6afd38fb2a666380f7b12bc36ae1967 SHA256: 01036affebf0e303a6aaaa45642741d3efc16f9256866abf843633fd3f04d3a9 SSDeep: 192:T2XHWwwJt9nEV9t+sSFDe+/dOYTYKRh68c:SHNwj9nEEFNEY8OVc |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.60 KB |
MD5:
1fa173d736a69cdbe9a3ac02c4b886b3
SHA1: 0f4e6521ee089e4bfd79e3e6f643c678b4a7b176 SHA256: b1aaa9aa80062af1fafb08ab099bbf21f6ece989281551c63d3d2ae156c93266 SSDeep: 48:Y+d1+rGbt+EInNeQyraPFUk7s2quylRePs95Nx3+ytqOW/7Y57F:Yy+rGbDIsQFtU+byreU95Nh+KW/7Q5 |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.03 KB |
MD5:
dca0db349280d700d4c72ecfef8f046a
SHA1: 6f7434383abc2d3480195ca073429d5a3d158ef7 SHA256: ebf44eb8e9d0c6dc1d442ec97c9a8cd2c0fd747b53bc656fc819c949e0647db8 SSDeep: 24:zoLkP0llPbDoLoguQxneybrK33CCCjHy/eor:zYP79GbrK33CCSHq7r |
|
|
| C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.44 KB |
MD5:
dd27ae5cef303fb03213a6145b1efce2
SHA1: faf932465d87e86c8979833350941a97ef01e8da SHA256: 5e2a26476e6147bbeb2915bcc6980ff6442c0753295b9361251a635b29a55948 SSDeep: 24:/XidIQyMS2Js6nzKDIQ5IPk7J4jRM0VvrLFtzEg45iSUwt57VX9vQe2yzSeop:/APRjLQiM7J4jRM0hBWgLarX9oe2r7p |
|
|
| C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 9.51 KB |
MD5:
04b0bd67825cd8bcd805c0b21016253a
SHA1: 3232b67dc2bea6360e534f1017d647dc58765afa SHA256: 000fa95e4336c04f8bfc9715a2f5d3f9c4af4266a34b68af760b522c0f8cbffc SSDeep: 192:pHrq0VRZ3zwVdaKjoijLtEL0mqxNUfD/8oS+X5WSlvzHqWW:pLq0VR1I9joij+i2j9xlvzKWW |
|
|
| C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.81 KB |
MD5:
6be9201489b7194cc443cfc29c747a23
SHA1: da4f0939244969c3ed2b8142dc50f1ed6fef4a30 SHA256: 313c2288cc20d84b98bd22856e35780064a4d411b53b81bf6599b0a694d56846 SSDeep: 48:cUhl9Fu65C4IsQjvCoN2WMh2KTJb5PDY1Ne2F7X:cg/bLhuvCoMh2UJbJDY1JL |
|
|
| C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.14 KB |
MD5:
2fab7c85a5ff496d20dca01640d61f36
SHA1: 65ecb06bb8397adb6bb68a66712431762c6c4fac SHA256: 17dcdd78222ea3ee77d13ba4d0f15933d443992b64e72f9337b09fee057fc6cd SSDeep: 24:x9AFKhEcqp02ePePayytpNhAppU2W5evFBM1eWH1VC0A7rUe2yFFeot:x3udZePeSyybfAbUCEekO0qUe2G7t |
|
|
| C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.18 KB |
MD5:
c368fe553689cd8754a434822e88d2b7
SHA1: 6fb7415da0d3164bff086bda82f1f3657c1951ee SHA256: 47c19426fdee05b2468792fa1b63e49ac8185ae4f66197e705047fb96c2b5014 SSDeep: 48:xYrL4xQ1dDdx5+OEFcJEwCik/GyE7YZX4oYH7F:xYfo2Ddr+aJrCUCXjq5 |
|
|
| C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.07 KB |
MD5:
51ede0585aa232a35be55174f7d67aad
SHA1: 9c03d5088158fcffec3d04966e47dcd7877b4e1c SHA256: 7b6adca605e80d48d12c56bfbb434348ce29c7bb390bcbdc53949111d24e92f5 SSDeep: 48:4659Szd/r0nT9yVnenlYRp3NbD+pKihrn9BL5FqPLPWWCkkY17F:465wzh0nTI1/+pRr7dFqSkkc5 |
|
|
| C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
18efa07eafff0c270111888e03d26ab1
SHA1: 2a161e8c3cf352081c199d54591d760f6d889597 SHA256: 8360c9d6853bf298a066ad1e4c2821440c5354a55bd14ec4885448b1382f2729 SSDeep: 48:jgXH+0YjgsAln6pTvHUt7yoaAmPYuCe2i7X:Uu0YjtSnUvH3XPYuDL |
|
|
| C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.65 KB |
MD5:
504a07a58b2fdaf3331ed3299894798d
SHA1: 6159083e799e931a29bfecaf9de7d9bebdfd0103 SHA256: 7dfcb2d43223d06ab442d3f40f179caea6732995c5a7a6bda5d0314fa8ac9d28 SSDeep: 48:nI0zC8o0pY9y/Z41rLP4xC686IBfSzPMEYHaE7F:nIACRYYQZ4dLP4YuIB6zMEWp5 |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.05 KB |
MD5:
f3abb450e51eaf175f5296d091fa007a
SHA1: 7ab2b2e0f63d4a6940ea4e48e87437f94d33d09d SHA256: d7da0d9a61007c3644f9e99cf919f17ac6ef19128d627424d73fc497adb3d81b SSDeep: 24:H8U80hSWRGOiM09aCSnGWWlOHS2QyFeoT:H8WUWRPM9azklGS2Qw7T |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[restdoc@protonmail.com].zoh | 65.85 KB |
MD5:
7ee2256cc1bb722ea02b096d28dea276
SHA1: da99aca9265b0c5ed4b85f45e7cd481acd7695ca SHA256: 24f9dfe7da491d3daba8f70e5df8fe57a974a926c57d657832943cf2badd2d0a SSDeep: 1536:2oOmaME8biOgMcEKmtL7z2VGoLrN7OXKcwYhFD8gude1zdP:2hvZ82CcEDSGo3NqXKcwYhFx1V |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 9.37 KB |
MD5:
b3154e79df44417501d694cd6fc88898
SHA1: 317ebcebff5cf777079cdd6de9d876075eecbf82 SHA256: 0b2010753b15dcbc08539b4fdc75b1c6135c908b0a67f73c9c075d212cff7b48 SSDeep: 192:Azp+hSvYa7Nhwd4nhG/UvoYJcIBm288Lrd50pvEJPzO:8kSZn/nhVvoYJBmcLrdipv+O |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 582.61 KB |
MD5:
2e8d2e6ffe943ab29c71c241bced4827
SHA1: 479546afe1f3762f1a9771ad594a050fa3ed2378 SHA256: dd6fc006d5b44ed48c5f8ee5dee5b492eed866a1548e91db378dd020975dae52 SSDeep: 12288:mH9y739x+Ut1v72c5sj5Qy5zkg4McMAIGMiovCZPSYB5Aw:ey736UTCcCj5Qy5ggURIGMiovCZPSYBV |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 582.61 KB |
MD5:
3ce7d780308a217a5ff811f20401b7e3
SHA1: 9d31dd268616f812f91df64ca509e42174ae0e01 SHA256: 222c33d92c357a50711e757aa462cc4a2764c079ded58d70ee89768ac521f30a SSDeep: 12288:80ZWz2sPY8xx/bw492NXP2W8rQSMrxd9C16ASxl/u+4CbPUa77Fsu5:8ukog2YiNxI+4CbP9t |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.56 KB |
MD5:
6f1a34b063e8338d10cc8266d9f5a370
SHA1: 12d87b4313b979038a6a89f650cf46e248d02fb9 SHA256: 42d7adc8a571328b67e120304256f79acd16c6dcfa1e1a322d32ba990d0db168 SSDeep: 48:KK8dSE5lfwMmjgjtVktfXSNvmL014w2vhe227t:v8dbTogjtVAXA+A1f7h |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 2.80 KB |
MD5:
87d584746d13e44e03dc9ea9b32edb51
SHA1: c9ec70a66a70ed8e737519bd4119db67407284e9 SHA256: 1061aed32414d1fc1d1be8eb81ebeb97cc485f7c512f2912e5e1c7a4ad18b4c9 SSDeep: 48:1qStdFoSULqECXwRT21dDor1bQl+C9QjNh5KOEe8izEcPYr17F:w62LqtA12bDor1Ul+hNhdwcP615 |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 5.67 KB |
MD5:
d1d78dd2f62411a2aff597e4b27e2cfc
SHA1: 2f374cd0d4e6a22e1bd2aaea050c5e26d528559e SHA256: 56e8f0fe070ff7852b85f6cf674f030a250c263014ea8bd84ba741a999a80278 SSDeep: 96:IDD/V0q/y015eHrNdOmZ5FQ9dJ48PFWhNXtTH2FlTKzImjlh:IPtsuyrNYmZcyN9LMmZ |
|
|
| C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 4.42 KB |
MD5:
44eb42090084a1bc966602e2f7e35282
SHA1: a14d057f5290ad89dd70ae86936422741905ba93 SHA256: fa775d29a32c62aed448c35ccdc565ae3e5cd9cc0d1c1c77f0dfce3570b271b1 SSDeep: 96:keV8l+z790Kk6iAJPsROmRMfgXZ+df0By6Ud3ADCLNw3O0L:kaLfJOABsROmagXZ+fN3ADCxw3V |
|
|
| C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[restdoc@protonmail.com].zoh | 26.79 KB |
MD5:
88d01273c2056f13d57bac57544f1c1b
SHA1: 7d3197386e81438e2b916c56f465d2c9238f0e85 SHA256: ac0b3880fb2c1ceb460b9a26c4cf701f0807724f4c9d2ed501ae1ecf359a70b1 SSDeep: 768:krPDsgnW9x5McMopIbM2EOCu9BUSo4JEcmuu:kVW9nMRopI42vFn1JEzuu |
|
|
| C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 1.05 KB |
MD5:
d8555506f951f689c9ce913a5e9ca02e
SHA1: f6f8609bd0650554ec9ca74f8e14b6fa45a7db1d SHA256: df3a34c75a2eab22eadd2869ed673ab93a8801112be83a52f965b735efd64f34 SSDeep: 24:6C82zZYc0FOmUswREnT2V0LvseCdxhbE56WS2QyM3eoT:dhfsDnHv0xq5E2Qx37T |
|
|
| C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 4.42 KB |
MD5:
eb6f404c201e1873784f4e9a8ed82fad
SHA1: f55cd7cacfe7d6f2d8037a1e1818cdc70b80d947 SHA256: 43a0a570ee3e4e6e675133c8317eb457f2f860c091bc734da3c1fb7cb3b88751 SSDeep: 96:Nc/XNeRIXPTSkI5dWUVKNZXB4ZJ4gwHF5KL:NM/HI5dWnZUXwl5w |
|
|
| C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 6.51 KB |
MD5:
8b6bd0bb9c7dabf1c70e91bd2d6cbe83
SHA1: 56a80c753017f8cc192b5c6757da64d034d8fe50 SHA256: 17ebf33a85787ae62d82530581742225fb2f6a03e86d6d1386310d29a9d8a7d7 SSDeep: 96:cV7ZM0uYHPD3N7/zbS3Ss9cuK/MOqdSaSIJWa28c+J/KuS5FR8cwsn9VdtU5h:cV70cPTN3q59A3qdSwxc+J/RyXdtUL |
|
|
| C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 16.52 KB |
MD5:
abb11ef437bab1173febde3915782539
SHA1: 4978dd582d51a16c052a4a9a908f362704d3b422 SHA256: 108136617fca9f8f111e2183bdf825b1e40023a6d6d19d94799a17e255d99eef SSDeep: 384:HMJnhzYcEdfx5HAs5T46SElFsh8Hm8ijCwKLIRu8r1:inh0cyfvHHTiEQITijCLcRu8p |
|
|
| C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 16.70 KB |
MD5:
1bc41fd277eb7ba2f530be281bf92493
SHA1: 4ea6910bd5a5ec9ac3e2f240ee4848806e89fd01 SHA256: cdeacd97c338b17cf49a38e53a87a5c8bc5bf7491a88769f365f0e897b4365f0 SSDeep: 384:rDVEqtnS05mhWo4w9TXR+6AyNd8CxdfFjhzDPQQ:tE6XVYVvrffFtYQ |
|
|
| C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 20.33 KB |
MD5:
018d7e744bff1df6529ac5842fa5e3fb
SHA1: 012b472793e68b38042b66fb4fae52b3192a070a SHA256: ac8f23d7b23b55c3355887e97f5a0e07c783fb623b4387ae02d86e4fd9c16726 SSDeep: 384:NHqMJFdiyc2cPNwkEbOYg9A9r2c1lCcpR222o+BwNW/E3pmij:NHqMJFdzc2cSpgaFPr22oF2m8 |
|
|
| C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 8.76 KB |
MD5:
7a545094c369c49474a5152ebf225a18
SHA1: 368c63c2a4036c65fafeed3d633158a4c33a9248 SHA256: 823b1ceb6e3a9acd7ee860b446208e40319669ea2f74ea9bbb06962df28aa4f9 SSDeep: 192:We/059SoTQxRtUjND+zT8HiIf75Dfp5G4Ed97I2:DnROd+/5IDRW1r02 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[restdoc@protonmail.com].zoh | 14.94 KB |
MD5:
b514d8766ea81dbd16b83e6399e5049b
SHA1: 91ad1225131cdcfb7e2d2e109ba499c3b40d1eed SHA256: 84ace4e0b5fa1a0a1cb2ca4fb3ab822ab89811d46f1660bdcf117f15fad995bd SSDeep: 384:WlINV8A7bN6Ykelk20UwRQ8ld3Q9UW/MsjDZdob9qpFCqvBj:WlINJJk2a7W/McdaqpMm |
|
|
| C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 30.60 KB |
MD5:
f42e040e2c744a05f2bf965a9147f4a6
SHA1: ef75d06a9dbce472c4a18363cd39fa98c056fa15 SHA256: e444894fd672022e618be8388c7813a776fa1623ae765dc80986102a03ebc184 SSDeep: 768:XeVNiwhdn4Uu17nxDNErukGSQnIYas3auA1MucVUme9FnWvIYLX1e:2j4Uu17Z+MFx/aF1Vpo1e |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[restdoc@protonmail.com].zoh | 1.27 KB |
MD5:
7f07aeadb18ba6405a7dcec5a98401b4
SHA1: 4bee1674f256a6d3f35aa07c94bc57d049cd0d8b SHA256: fc718c5e9cd20fecc176603004f464c387e1e73095bf32d3927c91b9069e43f6 SSDeep: 24:eFIEDDIxrmDranhlbxc2274+P2uCu3p/NqDk/ENBEQZbypeoH:eFIFxWmhldS4+P2uCuFIBHbc7H |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh | 1.88 KB |
MD5:
41f901096a554368619fc6a9e11c13ac
SHA1: 3dcb4e68009da94da049dc719a9110030cd2d013 SHA256: 2c37a721eef54b3322729e97d60da99d9041578a983c0d960765bb62020ed8cb SSDeep: 48:ZXpb2AteulhVU5E2tpYgCQf8Uf2ORBDeky27H:vbB9I5EHIEU+ODl7 |
|
|
| C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh | 4.42 KB |
MD5:
f2f6584793869f11d772af3dba953b31
SHA1: c437aaa1040f2b4595db5eb423f7e5a12e50c362 SHA256: 277354983ef6843822019cf62ea7671d8b6944ff1e27e89d2b9e9cecff2a7472 SSDeep: 96:/6fjeH/J1oQjo7tE3rekLrl+d6qYGpcMO4tkqRL8ZLseL:/ijeH/J1bj8bkLrqYP34tkB |
|
|
| C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[restdoc@protonmail.com].zoh | 1.27 KB |
MD5:
10423f776463bf7d6ae7c4ab9cf98a3e
SHA1: 1123eea06de7d22050a2762f490871a50eb4e97e SHA256: d5e18119d2a1c90ce8ef7b4b19a8bb8c3f32f9b401d9344628fc61bef4bc650a SSDeep: 24:bvU7tZmTeZVI8w34393qyxHJ28m4MEKa6xMNrF2ltzW+jUZyFFeoH:bvA+JsxlG/JEKa2orUHjQYF7H |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.56 KB |
MD5:
a4601843dc7e2c8a5b7752b7f841ec9b
SHA1: e3392419b0f5617dc95cf8170f6676d7452856ff SHA256: 451044a715f36b2560f045bb527649a7be831771928337b5089a32670010d475 SSDeep: 24:A0h32f9BApsaB0AezHRKljZioc3ssUZ7LitMYWSpyRaeot:AbBSWAeAZioc3sZdLiCOpZ7t |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.05 KB |
MD5:
0cce90ab2fe7abb4cb726c2d751f115e
SHA1: 70455e809148820803d2b56b7a794b73dd061ac8 SHA256: 7b57b1c85022e83ae16442b053d1e51021e0b5f0e347d599b9e42d7ffb41efcb SSDeep: 24:RHdfjhvX0GpZj5QWzg30eOguDzbao86A6lFFSwo3WS2wyj4neoT:RHd665Q0gv+Xj86A6lFow62wLn7T |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.80 KB |
MD5:
56d43958a6f7dbdf9b25cea52b98d768
SHA1: cc092d185bbcc958cf971c88ca3b978e1e595304 SHA256: 83108aa8e23e4f2b357d9f2e182970e9787c4bc037372975a8dea5a7de315398 SSDeep: 48:uPbbE2ndEbinHgVHU7hG9Zj/6jRVBG/RdDZlrYQe5jKwD2i4dPE9QsulI9pYN7F:pcmsgVHUVGjz6jRfwtlrYQvwiiIE2sHQ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.76 KB |
MD5:
6c12e4676b2509d0e1c55bdb8261362a
SHA1: e51f5dc0ab2e19c6fe82abc61f26527d3d283826 SHA256: 1bf14f3d076bd98871f4e1ba4099e23a93d12f1855a9b5e3794f36e0ab85310d SSDeep: 48:ejxbY2DCwq6vgHRN7ZbOQEoRl0MOlnUFmQpmmmp2F7r:8fqVZqEwpFWpma3 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.47 KB |
MD5:
1848aa0095e50c81a2d7764810fc0235
SHA1: 84699c6121279295c67167504531c4946ac59118 SHA256: 9b73586179f0d069d0d8751cde8cd04f19b3c3f0d2efb9f595abb08aada4e8e2 SSDeep: 48:EH0wI/LwxHTRko6LJGxwL5nWoF5uKiv5PvZsyulHRTqYA07F:EUwITwhCoCJGxA5nW4uDvtvqzHhqT05 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.14 KB |
MD5:
eccc5325e15867d1dd56c0a2e829dcf7
SHA1: d4029d01290ffd6cffb4eb3b3a7fe667d7857964 SHA256: 1cf7d12e1d11f7367d552f2d516259803cb455c910a91453ce42336d8da2da32 SSDeep: 24:7/qCzF0MQ+Nf4RLteSlFMKTSDo7ifsabBjsbpzRiQP24GDEpygKFeot:mCzFWEIrlFMKTSDocTFCzRiQxDpXg7t |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[restdoc@protonmail.com].zoh | 2.13 KB |
MD5:
9e76696ec36651567552406d1261c31f
SHA1: a02aac4ff86748f010f3e2398663472e2bbde828 SHA256: f99fbac37641fd981dd76d12145b2e81301745699db3f2fff3189246143db3e8 SSDeep: 48:P6LJJxG28P6zmsQpwWitwW5Ooxy+cpZWrtNXG16g900zikjHuIN0y4W7v:AJJu+BQUFQCyJpsxUzBn9vj |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.65 KB |
MD5:
6b028371d5007262d8ade0481d13e87a
SHA1: 2ce0ccc0e5f955f53ba6982d26984fe6ae48de69 SHA256: ae0924238b809c78e1c0878d990c6cc301e4e3f88f04e51405ac451dfcc9a508 SSDeep: 24:Gt0VHuTmPoznemWe9VzfFtcQ1yOEqRBCKLbT+xCu94YM5AgK6y4Srv1DfwYyvjeW:C0VOhqqt3fE2CKLbT2CuCAT6ynx4YK7F |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 582.61 KB |
MD5:
36da7abcf32422d28b1db851efeedaea
SHA1: 8c2935dde2c7fb1833b356c69c90a08ae59eec60 SHA256: eb363c74cb8643d047392bc16e6732eb26c6fd621e5e33f358479cf0988522c8 SSDeep: 12288:1li52uRD8deRNhcJUbYZPS7uUJAOLKz6yKCSLUG4Vptv818aV6tB658W:1lRud4iIdoNLKWyKQztv8yaI3dW |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 855.24 KB |
MD5:
3fbc779122a22a3eaaa65047f5e4f5e1
SHA1: 97c4f1040ef7e9a5c12be1516c0fdcd6d227aede SHA256: 3f1f34d3d4951b630785e095e8a1ff7e00b53ffdced34058d61d00930bb3c292 SSDeep: 24576:x2Chz44LFB/DmCXmVm/FB84brhciYeo6TNgwtf:x2044LFtvXmVY84bq4gwtf |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.44 KB |
MD5:
c259a5b3432d608248af1e5178bcf158
SHA1: ec28d79165cc0550f311a17443b6fc3d0aa10e93 SHA256: 1a776aefdb99ee8d58a84daeb59837dbd06f11b9f190e07a2b332940242db600 SSDeep: 24:cecO8U/xXwlGyz/N1tl3FLSaK6JaJqAYqcckXq0T+TMPho87oTDdDe/eIpyleop:lxX4z/T/FLSCJCqFccZxPXEDdDupQ7p |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 5.67 KB |
MD5:
52e3d0eb903300c4b354d18347dcacae
SHA1: 14fc14a1a46d07e945f6f8e65d964be6530ab0d6 SHA256: 843067e8dee07352563d2e920b4633c7f0c9db99c4bbbf515fddd059544f6967 SSDeep: 96:KPY0b//GcXacd48Xe9+QrIpb5xV1kyWhtCrDEdUFKGsxbK4QbxpwkGxMqalwh:SBb/Xf489QEpbdCyWh0EdUFjstK4Q7wB |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.05 KB |
MD5:
9a0f82224c5a1616be1af366952b5107
SHA1: a404e6706ad0f69170cb95b3dbf8994777ce935b SHA256: e9dc8c0699e7f27c9ec20932c45533e5ca34dde75cc6b2eb76527c7c4895e4fd SSDeep: 24:TWd4KuM11688S06R15Ud2kVmcHlVTgBRM7GS2wyjeoT:TWdcnbwkVmcFpy5S2wG7T |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[restdoc@protonmail.com].zoh | 37.04 KB |
MD5:
f8076b73bd141a56941d29c8d4ef75a3
SHA1: 5f5094c03daab9a56379729acdab7637deecba4e SHA256: 637f20f572c247fc16519d055228f43fa48794e204241169dab4c683f726aace SSDeep: 768:HrcjaLhcQzfz2NqkeGdM30ZupNRUR23NN2gNlg:HrcmLhcQrSN2GdM3JfthNO |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.04 KB |
MD5:
4d326dbe625a15505b26cf306c1da336
SHA1: d5df82973aed29baad47caad90916caf3d64665f SHA256: 9b9249c88cf684f2ce7a841026539e2c6c6f77edcfd569e43064750d334ed09d SSDeep: 48:8Fo2ufJhJ7nSc07qDhXzZEUST/WE7RI7+4Yp7F:WufJhlnf0+Dh21T/27H05 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[restdoc@protonmail.com].zoh | 69.80 KB |
MD5:
57ec3f547cd4cd2873ae733668caa167
SHA1: e053106b7b8dfb39ec33ff37c95dd763fda7745d SHA256: b67f06ecef52288f512d72471aaa9425e4a3fb1ddf0f5d4b9536c81da7a544a5 SSDeep: 1536:jq9awp14DRvP2MvcFFBvFoK9pIb6T9DJVJKls8E:W46sRvPNsMK9089Dcls8E |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[restdoc@protonmail.com].zoh | 65.85 KB |
MD5:
e6fd30b421de0f75c234d380193fa8c4
SHA1: fdc0862038089ed17fbfbdf616ba60238985a7d3 SHA256: cd2dbbf63f6be804de152e3e92e12f7fddf12f53e3109149e92ffb7d11dda8cb SSDeep: 1536:cEU4KzqskSQRxOAw0miRIN19siqtBz0u7VHU+sX/oI:cX4KFQRxON0VyEiqTgi5sX/x |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[restdoc@protonmail.com].zoh | 26.79 KB |
MD5:
bec1904ca0d9743da129314c61d991b3
SHA1: 6a95585106d5d4d9f42e62200f7d0ca1f42a6e76 SHA256: c3c82d84752917a93c6f0b72b416fe31db0bbbd9a5a90ab91e9035de64e73720 SSDeep: 768:GH7LYVao2MdS4I+nkVFnpQFMkL2z9ZT5OzSxY1ZXO:Gbaa6SZ+enpLk09F4fo |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 9.37 KB |
MD5:
098f430d14f8400e2f83571cf69767e8
SHA1: 9a6b358c883a1609d38feea439ad44b2efbdcd0d SHA256: 8415f84d430c92af16dc3128969fd7697ff311b224d83014358b4d48503fbce8 SSDeep: 192:8GduUUWykk79Qv/SYFfm1mQo06grfMdR+ZEfoHtA2+COaySkL/RFyxDU:8GdunWyX79BYJOw06/ct4CTkLZFT |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.54 KB |
MD5:
cb5721e9f1d14d787f6831adb1ebebd8
SHA1: 31281b89997e7b9ab2693f606ce7e372da42a844 SHA256: be1bf0fb417221490058b00d7566e32b4715e5c75702f66c29c4f13aedb88377 SSDeep: 48:Ldp2e+TVn2O2KWINP+AoBORKeJU4okDTCEf33I6PcdVqIAaYN7F:LzH+TV2NUdJtokDT5/bPuc5ag5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.81 KB |
MD5:
bcc9ec22efc20f67e3cd724dbd610094
SHA1: 5f1afa794aa8f47a3e9fbcc9cd20719c285d098c SHA256: 58740175315db73b7e11ad5cdb22d4888fcbc5b6e05243dd0247f8cf717c514d SSDeep: 48:1OxuB3hzKtItUwhH7nSW2x3G8NJZpwf7X:ExY3kOtUy43tJuL |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.18 KB |
MD5:
ee81381068d922dd5ac09d0e52c7b787
SHA1: 6e6094fd8df9d92995e8908b4424d48c9bf04edb SHA256: 9df934d2d6543983be513de20da41d27642d096b71d5dd384548f42d3c4368b9 SSDeep: 48:xEYakURFRj0IEDOof9XXfZAvRVK3uUv+m8Deiu5TmgqY7n7F:SYakiFRDIOof9XvC71y+m8dwmgqC5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 4.42 KB |
MD5:
0f6dffbbe19c10ed727a34aad715ce14
SHA1: 7a41027fe79c91398b60dfb336a0b39616c1338c SHA256: afa881e281c9b1921dc0c05c2644184c7858c5284a9fc52952e92fa260c1cd4b SSDeep: 96:OMLTIvhhqKcW6jIp0veDCqPakQFUBO7WBtVewqyvgL:OrvhhDcRIHDbzRBvBe66 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[restdoc@protonmail.com].zoh | 26.54 KB |
MD5:
924bb4eece1dbc72784d2331536a0298
SHA1: ac6a6ebc81baa68c3ae10ff42e63646687388c1d SHA256: 01c0b882b7b10f11b819a82303ccdbd00e46438e17c1e6018ca6178f3648dc39 SSDeep: 768:OsOCQQf3jQ0MCiCKSci3F0aSYHEo2xRVRxnV2QQnmwf:7HPjQ0sSzSYHR2xRTxV2Qamo |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.60 KB |
MD5:
f1b2edfc9793904f1e0fb1b701247c46
SHA1: 21fc35f6704de5780a0ef980e2eb5c7741e3712f SHA256: 9648c7d50aca1432e65426da4beb2f598d95ef7b36c54e0595b0246b6da4823f SSDeep: 48:jrdR2ZFc5LN0fswSt2mmBK/ODS0CQyxVvH1pR7p:j5R2ZFc5LNYM2NBtDS7RxVF1 |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 860.74 KB |
MD5:
15ad1657ad91f8bd9da1185eccbde0eb
SHA1: a410ec500f4b5c736144a987deee8bd5f7164f31 SHA256: 47bdfc77e236149ceb5770754e431b1824174fbf57f799191fe4d0fb9cb1dedb SSDeep: 24576:JReLKEpBvNtHV/pg+xv+tc5d6N6M1nQz/9z0p0v:bMdr/jvQ31Q7+pe |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 848.75 KB |
MD5:
6eb23adde6aca840b7e2b8024f35b89d
SHA1: 54e2d658781a80f20ab07c15a62f914464fdc0cd SHA256: 53d86505f0478d3fbbc9309a92e4167af4fe2932d1ed6db8e9065d7c29afe5da SSDeep: 24576:jLQ+VUbQvcI3Gbb46XinLK9z+M7MzPX7RmWtQUqe:XQ+ybQkiGbhiIz+QgPLRVpqe |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
250e149f4a77e1bb292d7350125c6c0b
SHA1: 9503967f2c6594b3c77b6927809edc1d45e1369f SHA256: e0552d8149ebdbd3fe22b423cefd94d747f459d3925cf956a9c40bd6acdcb924 SSDeep: 48:zJ/Dg4rRkjxx7nvcuAaqe5oieLCtda+3iJzKjLtpRB7V:9M4Vkjf8aqSolYdzyJiBJ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 6.51 KB |
MD5:
71d6428169c1452ccad9b4edb6208f32
SHA1: 5df93b60bd22b6f8be6ab1e78211cc66b1cbea3a SHA256: e3dc638679a69edfadd9d3fbf17422381282a8fbebe20619a257629274bd99e9 SSDeep: 96:FJ9j+0mzyHsZY2AvedZ4skkqmrhE9t1x0V9yiIMv48Cp7tWdGqEvivbndch:DVmzyHsvs+a7mru10R4bpQBEvEdo |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 16.52 KB |
MD5:
62b9c9c20a7254741215fa06e5bab796
SHA1: 50431c473832a8db9c22f101c2cb17468a0ee457 SHA256: 50f3705e174ab4511ca20ef7b3b0e9b12607979f80d95bb13165dd854de70f9e SSDeep: 384:2/Ikm8loFoxmVEmFQ6ycIq3+mD7lCMForQ2G9y:WI1hyKFQVO++Groy |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
2e5d8ef7e2a29d831596b3d0b5ecbfa8
SHA1: 4eafb9871299914e571c48160fcc6afba4fef41b SHA256: 9be1cc2bc1a7511bc5392f0cd3d382d84c88339055dbf8cacb873f30124b7dae SSDeep: 24:CbtEEkGoamx069c0YruQ0Mx/CAwB88xpfeX8P4oYgKZ0170snMkIjQpyAyeoX:C6Ha6Nm0YrSfp88OgKUYQppy7X |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 3.36 KB |
MD5:
e76784e5f1a61f34bb0e2803c724bc89
SHA1: 90c9c82706225493555eb5a984c53cd390a9cd2a SHA256: f4e923b0fc27af101aa59206d6efb6be6337190a27c097cb68447c19f177a680 SSDeep: 96:df7Pg9wS+EFVSNkajaedBl2PGDLNbIIcdcswKz0MUdjL:dEK4VKkaW8BcPGDLCPmsKx |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.55 KB |
MD5:
01b5bc734787b834542ce14154d4d40d
SHA1: 69fbf013679bc2220af4224ef1b5312b8e6460cd SHA256: 95af48ff6b4f44643ff9987d97df67df3e490425640db91b84d68ea61a3ef2fe SSDeep: 24:Hs7SM83TCK2bDt+Kp3TBJARenBm6HGISj35YBO4KUYy5TBIXMsl4KFLNv7bQyaeW:pM8jsbDhQenBS5YBO47fpBoHFpT8L7F |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
3c394dcae69f3af7cac4f8224136b244
SHA1: ae713da87e775dda55e50ec641903bd9ab446431 SHA256: 2364908eec7f62fbb714ae89fc4ed95038d6d381d4e729ac34449555d2e3da17 SSDeep: 48:7gKDt2shnYCKICFcokvZk6iXw95JPCfEeqz7F:75tYCKFFNkW0JPOEe45 |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 853.75 KB |
MD5:
a2741c43719794177b557d4ae71cbbc8
SHA1: fd7e9ffdbf7cbe3975539e5b206a0c1816c67171 SHA256: aaa10c1564b2e837e32c2776bbd3f6d8ec2e48b940aa5be288ed4159f5204950 SSDeep: 24576:U3a5Zow9A+ExeOvNHdRwuHimi5a3EZntkI:Ua5vEkOvN9axw30R |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.07 KB |
MD5:
05ecb5032e2ec4548428cb191f8dfe2b
SHA1: 1db499c8f18261aff4a5b267ec42d67c7ad129bb SHA256: 43675de2f03c2aff1a470351bbb11e77148263c34f8ca5b7bd4f7f78e84eebd7 SSDeep: 48:DLu67D5OKPFlywRQrwOEZrHnrZeiP86noHIhpsPvN/kN7OcYz7F:WcOKPFowWEZrH9eA1nowmPvFktlS5 |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 865.24 KB |
MD5:
7989a32854b80401b95864dc7dfd3d39
SHA1: 7397fda8a5c257d874c69367ef1514c54fff203e SHA256: 4890762de6cd260ca5f61f965c6af83636967be8056e81f8823f6dda48ac6b58 SSDeep: 24576:UJlz17UJy0QXblOF8a3BHs0R7/49DkGWos:s6J/Qxa3BMu7/494Gm |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 4.33 KB |
MD5:
9e35b4b7bdd64800861fb1f3a6c257e7
SHA1: 291e19a8bfb88de95e79e6f9ab9b5258a5dde849 SHA256: 513528656ca41b22d39a27bd37f8fd98dc2088ffde1c4b534a62f1ecaeb6228e SSDeep: 96:DQ7YsiqIw+h2J1YNqLakOZmDpw6UXueNJySCKBQg14fdOFUB6Brezx5:D4rjb7xDpud/9FCfO86Br4 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
7ffe53fa9da8fb54caddab0f6f606871
SHA1: e1000a7edf3f965dae53948f7a1ab2ade6595350 SHA256: 278ddf632ae615bfcba1e11be26ac544dfefd06bd81776206854b793be034bb2 SSDeep: 48:Q+WLs4H9y29fILggoRJ8FeewEeAu9W4s9Dwo+S7F:hP4d1QcJiiEv4FYDPR5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.07 KB |
MD5:
39adb6a374ad97797d5f876c85725a36
SHA1: cf5c0f3c7614a01ae4f371539e625fb0e0049e2c SHA256: 8af041d9ad9e0197b02def12e4d7b1729c864c6af7329d9f2d495b722d6d649f SSDeep: 48:noujXqf6JAt81Wqe4E9KHGV0Bpi+5f1YZ7F:zIBov9lA+5f1k5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.03 KB |
MD5:
822d6ffb94e8b3311c4eb71193a429e8
SHA1: fe525d7104dfb58801579eac2e4319610bdbe453 SHA256: 6d2d8a95380817670737bea798208061f658b95904e015816340483c4d1aee8a SSDeep: 24:Kx3nAbkKugaCN+3DPJOp9oEdmaoOgv4W0EAuGF3qnyA4Teor:KukKY6+3DPJOkI2v8EAUnZ27r |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.66 KB |
MD5:
399fec3358286e8eb981837cbe4ebf46
SHA1: 4343fc3dfaf27259448d59247f6086d706ee4705 SHA256: 0b0c27640a1fc0e1db10c23407243b58469777b01bf6784e3219512ca1ef42dd SSDeep: 48:EzVVPwpIj0/PkZDxlBLLgVzEoE6TI/oSp+47T:wVMZPk5xXLgOo1I/oyf |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.80 KB |
MD5:
cc4eb5914c5f3613a4c11da6269e8f60
SHA1: 9106edcdadbdf17542188c4b2a85dd7b277a0cca SHA256: 0c25db7e2724493e9673d7fab338666d34d1eb94f925ec29f27e08c5d095b73b SSDeep: 48:qN2/x1KXTLzlQz0yI5yxhmgcwH3oMr1fN/WYBE7F:qN2/x1KvBQzvG6dcOZxN/Wr5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 30.60 KB |
MD5:
a0ce0fbb48a4df4423638ff6282076e1
SHA1: d95889e221d2fa797a219842ba2e0f233e244d56 SHA256: 484c88d497983645f9f3d73ac2cdbb1f0b5672aaf649849c7a0a3e85a98ea415 SSDeep: 768:+nf8P3Q21Vn4B8tWHPJys3HD61MxJAaqDCWQxTDd:+nf8/X1B4B8tiyCjnJAaG7MN |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 5.97 KB |
MD5:
431378b54938c0658265b6948806c249
SHA1: 875eb96a157307d9f2adc9a0b287f0f17903c5ea SHA256: 740494bf3ad98bd2b6880d9840c0d27376f1b410f2d0092ddb70dd049e376dc8 SSDeep: 96:wiOdi+IfoVqnIjh3IiydTMboEuqYFj6r/aOMPH3g2wIsHPrnwmJP4nWuAF56/13C:wiFdngBIztMrbYFO/aOC3g2wJTnj/F5Z |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 16.70 KB |
MD5:
6dc8970659d8e3efca8fc899b9380251
SHA1: 2b99b28bb72e8a118bc3e598c05e9010d3464375 SHA256: 99f4410cc99c9ca3a8f7ae4fde58cbf5484e379baefa837078ab70354064e096 SSDeep: 384:y03eowzNTXw3yyrwVb+rNC39Jiv3dDPCUHzdcmuEXe42:5IG3yyrwh+ro83dxhKge42 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 8.76 KB |
MD5:
32daa87a61ba69df189849a51bc7693b
SHA1: d3e240b972a8fa8669fff893e19451aab982872d SHA256: 20b4069e9a29c272922b4c86bda57a2dde03c11356bcde0da49bbeb4a1e13740 SSDeep: 192:jpl7QV3j9MTJ+fTgwaCyZbcnKE3eqt1cdgvhdIs70s3OOtXQItA:juMTJ+Mwav4KEdCdMhdgPOtXQItA |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.60 KB |
MD5:
e164dfedbe6b9d400d23078afc014759
SHA1: 36eeea3234b0090f3598b32a1d7298353df381bf SHA256: a03e10d636b544652dda62b120a964319142cfce0a9106d4b979a1570eefe6ce SSDeep: 48:bmsuH04KauH6mkmHQL3boqVNm9nbNcl0hBTop25YexRRpVjL33YcaE7F:qBU4RmkmStmFNY07J5YeD1ncE5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 20.33 KB |
MD5:
6b18b54221b5a6bced60f0ce8b9d9614
SHA1: d6bb1bfc8140493ae485f89d28663cd01f398539 SHA256: 25b9d1c3b7cf81f486ad1767ee96430d193d9c46485be945915964c61ac3cc16 SSDeep: 384:iEqPYsGK7PNttMhnQLvw0rum5LsrfXYqg27T26ygtsT36qRous6uf2:ZqAsGKJMhnkvwvmybzgA25q6Touge |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 1.99 KB |
MD5:
d3cd2ceae63535914c1e3c419f3b12fb
SHA1: 95d9e3d80f680b48b7dba79b90f1c8cc1a18158b SHA256: 03098385ed0c2034ebcf50e142e07c40efcdfb5fa3d7f226fd71c5be90e56179 SSDeep: 48:tC6Gwdnl2JBSwn3OIPwBpAqr8sT/tEKZa24RH/t+pS7B:3l2JBr3OxpASbb2xN |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 8.94 KB |
MD5:
dd8652df0f90f1bcfe4abb5578ed8dbf
SHA1: 86b2fe0db9713282255c900416324a132bb0e550 SHA256: 29e6bda8e77a198bbbc73f2b7dd3f9a0a0f5571e294fcc7a83ef69057e7ca461 SSDeep: 192:LG9esN/l9HMk+e2xGjWe0QIW+tWQ7x3gS8QXBw37yM2mXrmPG:LU/GbGj10QI9WagnQxM7yMHXS+ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.04 KB |
MD5:
be8aebb2d147ff48d2f7f215cd274cdb
SHA1: b4c402837fb1c20c8b2e910cdd1795b67504e694 SHA256: 7328608b7c4abcff0da97c4202cbadf73a6a4555cfacaef6e6c238cd872a9a5a SSDeep: 48:dyy54LEJJX9ouNURc5tLgltFgGVTX0zVIQ7F:dyy54L21NKAa1gGW5d5 |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[restdoc@protonmail.com].zoh | 38.34 KB |
MD5:
3121f0bb8cf7ac63973384bbe411b352
SHA1: f5fd0d2076430e6d122756e3049f11d0eed61347 SHA256: 6a039ce1892d1c10c72bc49a202c93f0932dd19a12fcc4b3ea92e4495939dec1 SSDeep: 768:TNL5mSO8/n64PEJN7FhF5BudunR48lW2fNMHtLNmPZuh01PJD/UFO7p:95mtj7FhjnR4wfwtLNmBKiKFOV |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[restdoc@protonmail.com].zoh | 11.43 KB |
MD5:
4c7a289e2ffad2f0a7de3484d2f362ab
SHA1: 07e59fdfa436b94b91c774bea76ba07f48a3ac91 SHA256: e38a4cd6687d0c6eec552de0312f0b50091bd2ee2d2e8c53c4b7b302308e840f SSDeep: 192:dbj24JPaVH9An+KQwVMeihkHiNmsnPas+TLc+Ld/yqLx7MUfHUd4LBrR6SL:Jj2uWC+3heimC+cm/yqLx7MU84RHL |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 8.60 KB |
MD5:
2e776cbc430c959f52da06b63caf90ef
SHA1: 4e0df10685554fe598e42b82b9b9134b2422cc2f SHA256: 59b15781caf1ec4761cc0795e28d6aca02f427e5ff45097e3b01b6384056268f SSDeep: 192:KKHGFZMQJ08tYpcY8fP1qlqUiSKKOtAn+p/89AgJcNJ22+KA:KKHG75tYpcxP0DKKf+K9NgQ |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[restdoc@protonmail.com].zoh | 222.21 KB |
MD5:
e8586a3123dfb0ef94f82ced15293b15
SHA1: cd1b52e1b9595f2aa335b379db0739ef97a1ffbf SHA256: 697c476c979e636c93ae68ce471820cd2e10f96c5167ff74b6d42f00edc0bbcb SSDeep: 6144:hM6TH9rAJ52IU5tOqTkaHwjj06Ywx+3ubB6ufS:hMmdcJF7qTkaHwf0rReN6ufS |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 9.51 KB |
MD5:
b13c968fe1479a527ad24686ee75465c
SHA1: 67add21708c37b6ebf6cfae7f4aaf8c6c874353d SHA256: 8e9780807647af177390ad534abff04d6e91d9fbee2cfd5e786843a45cc56314 SSDeep: 192:4dEPiaXW6uCQhAU+a8NG21SudNlWLtDHkZD48g6Iy0mgv:47aXWWwAU+a8E2hnWBDHkbrQv |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[restdoc@protonmail.com].zoh | 2.85 KB |
MD5:
2697b6b4a4de35809881eac3381bbfaf
SHA1: 2f4d60fd437358d8fa6f71202ccd7f4b81568dd2 SHA256: 271b217d2d32e829f8fa4224fc8f0c2ea2f44715c79f06525d7c211f53e24d0d SSDeep: 48:l/2SGt0kQk3OQTtxTT9hO3636CY7hD9cFQWvfRqvA5a2vIAgx76IV77v:l/8cktXPDY67Yd4fqvcg/j |
|
|
| C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[restdoc@protonmail.com].zoh | 1.13 MB |
MD5:
9f3185ead4c1cb944fe7c922b8e20283
SHA1: 00d10c00b265a4635410ac838357f008ff633238 SHA256: adee49dac519697ea5d1ab5856b9c111bfc581c8c26f1a9b506cefab85ef466a SSDeep: 24576:OXexiINwGxYfkZzDx4Kpb4ukcw9VpkKHfQGosjuo:IKxYsZVR4NHBYmP |
|
|
| C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh | 378 bytes |
MD5:
6a043bbdf4457fedfa49467fd0d387d4
SHA1: 004d8f0151b5fd90b1125050c9fc98d31e7d106c SHA256: 44af49d9b71188ac8c0e5cdafa85225d6d7f73fa4df543921346007f8ebdaa6d SSDeep: 6:Bm0LOJvj1c+SI5s6WCiUyaZD6YisVbUpu275iB:wzhcDk1yaZDqsVbUpP5iB |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 16.94 MB |
MD5:
2fb10a322517f7cbfb3a6cfe3f7ec571
SHA1: f50dbea0bf05e4a4f73abb265fef52fa43db4e07 SHA256: 5ef870f132dab830dd5380a5f66f2db9ead790ee6610fc191c638c2aecd616a4 SSDeep: 196608:6a8A7fKP0ReD0wXKLUEfRrDXP2ifogB2jHcSBLWiyvyWJRMLhdPWfi:6aRDKP0q0wM9JrL2ifJcjhW/6vL3Ai |
|
|
| C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 3.14 MB |
MD5:
c4dfabdfc43665ddd61217b2ec822620
SHA1: d851ce0d88417c77a3514e2b8c2a02ae1398bece SHA256: 7448dbfe6a40133de18e6bb89c8b76935041bdcdd2b3f474c4dbe4d3664fb93c SSDeep: 49152:zDxL8QBo0Tex4S120ytJyrvzYoT6874hHVO:zR89t1QIlsH4 |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 3.14 MB |
MD5:
532b9761f6153639179d987c746de5d7
SHA1: 763ca17072638a5589bf029abed76a10f43bc860 SHA256: 4ae97fc7d95c1005a0a302c819b46d29eaee2629a37399930c4ceb4206ee0e1f SSDeep: 49152:zDxL8QBo6Tex4S120ytJyNwSvgs25XdC3ZoSToWXX:zR89j1llnWXCowoOX |
|
|
| C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 67.85 MB |
MD5:
6b078cbccbab0d5edeaa1d85f11ba58a
SHA1: 66820f091ea72f244d2d2019748cbda0b7b9702d SHA256: 7597007b7fd82fa6fc079ad255cc80561c20be4bc515df7968b4b0e377292774 SSDeep: 196608:H4KKCX5FvaeoDcBdxmOJR7nxOKOmE7dzaNQwr:H4KKCX5FvaVczxmUJnYSE7dzAT |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 3.15 MB |
MD5:
8189358a89bd2e27ec4e20ca8e69f3ac
SHA1: 8786f8cb6194516e05218e6ce3e1d434cbaf41b1 SHA256: ffcd7aa125ad2151d1fd4a2cb112ccbc0f95b2620a9d31ddb66619192a3dc5c2 SSDeep: 49152:zDxL8QBonTex4S120ytJyINVNfv4xo/H+qUZxQ:zR89K1uVNfQo/HLUZxQ |
|
|
| C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 10.25 MB |
MD5:
91b6a024fb0a49196044309d3308ba19
SHA1: 2b1f2ea3ff6382fbb5a15bfe0cd5492f4332cffb SHA256: 68b4a1876b8fb4a05d62f4781b37bd322443600ab239773c2790d7c0f980399f SSDeep: 196608:aPUvTYpH9RBl/tus7o4L7tZiTnp/jE4U/bxlLRx+Fx1:MUvTiNhU4L7tZiTnprP0txRsT1 |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 14.88 MB |
MD5:
0132354deb06c352353675fce278a129
SHA1: 82f447263c0d4d83d398af15034413083edcbc35 SHA256: 8e5451128ff68d309300dd54c2a3bb83f196e6fefb39f1e8d6b7c24b8a6f7307 SSDeep: 196608:TIwm3nNVAl+ig71eZ8FclBElWHEbyLbyo9crpLlR8ioLO0ZF9CrpbQ:OL71eiFge/GHyo2rpLkcoCrpbQ |
|
|
| C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 3.48 MB |
MD5:
c9d53821b87f71c45e6a33a4a39589c7
SHA1: 3be8fc59677f39ad9c0191daceeccabd9275f7d3 SHA256: f732efca2e4768b67e403defc83599d5734e6eafcc78dd1f00b370e6949a9019 SSDeep: 49152:fHYLL/WoWLljb1R6rOSN20yRJ6RjCo9C2e0wALZyn9r7Od5xIa:fqLVW6v99CylK9rKd5xIa |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 42.53 MB |
MD5:
4fb6c079967f604d4b8cdf477caf6de0
SHA1: a8777ca0e49e5d98d01a6b007c7b62b5dffb5b63 SHA256: 9fac05c1ffc4b8060b0a5b942d35cc90c0bff012af1a00a6712c6d03018b083f SSDeep: 196608:MaurJM4k8IMj3kMxfGbWaxJMKMA4JxuiNQG3A2r7rfiSFhysD8uxDxKj:EOn8IQkM2BFEx96G3AUf7FnzKj |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 11.70 MB |
MD5:
052b4a3aaf24e1879297e0f1408c7662
SHA1: ccf2d2087988828f8117c27f1ec3ccaf4b5b926d SHA256: 6c23fd16b44e1eefdf52ac7ad99a1fc46a9b4b3e77c6643dd26d1ad79a2d1021 SSDeep: 196608:Vf1gRyjQR9g8YYIcjfXontQdQGzFZaGkGdN7p06H1JX/WanfW/OIV0h:V1WbR9YY5AJGBZWGRz1kaza0h |
|
|
| C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh | 3.16 MB |
MD5:
e4b7c6986f435ecb20414ab436d6862f
SHA1: 78db27caa954a265f97fc1c1db650c403a82d8a6 SHA256: dc904166cd86152417b1ad207c783a9385d0f559a5893ae449b0e0dcfb43d29f SSDeep: 49152:zDxL8QBoSTex4S120ytJycSkCP1JfXsG5Bq:zR89r1ESkC9Jfs |
|
|
| C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[restdoc@protonmail.com].zoh | 2.35 MB |
MD5:
a6d16d93afa24e626217d262f995b799
SHA1: 25ae879ffc34b9c16d33498cc26dae2ade586478 SHA256: 02a1fe83adbfe2a86390106b9ff13df79e0f1fa3cb495380c06730b6ba4fc81b SSDeep: 49152:R0opH/cgHa3HRxz+4gDYpsoBbNzVjMhB7jpE/WvU:R0op1Har+MjzV46/v |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 13.76 MB |
MD5:
42ac6eff5aa1dad153cb32ec3d616e43
SHA1: 8d8693b1d4aa27f2f48345e6f2e760c5f205d163 SHA256: b8984acb419b90aab0f7fd9addaa90b10847e75aeaabfde74fc133085adf3455 SSDeep: 196608:Yu6eDsIwHBL4B9lCzT2bOgcDuihGYrLpVUBJ/7HAFGtNy6aMhnRTU+:WqsIwHNB26gVE7e/7JNMM5RTU+ |
|
|
| C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 20.84 MB |
MD5:
3d0e1f18676626331ffefafe53b18248
SHA1: 80d370bf723a4b00b769c1a7266d63de82280ab0 SHA256: 9ceac29cec7a9772266c3c6ed68bc7f25dcb38c12c388fe9f21e58890e9cf26f SSDeep: 196608:PFNUxdiOm1j3/abCsYwFOSQo2pWDOQs4hW6s63HS:qPmN3/abtYIQoROQ93RS |
|
|
| C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 3.54 MB |
MD5:
4f53ff74aafdb4425312ef71911a5c9c
SHA1: d50d94f1cbf5c9c583c01bd4887ff60bb937dff4 SHA256: 13fa32b69aad5e02c3e49fbfcc0f828641e6e7832abe573aee42efb33290ed12 SSDeep: 98304:zDMUwxyODPFhbY12HLodiF4+5rifL8Qdgif:z4UwVthio4/pP |
|
|
| C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh | 18.75 MB |
MD5:
06e69471c0bb81eb102e539f0a04490d
SHA1: e0e8dbed58bcba38c03ab546d7753d1f973df44f SHA256: b53484f0eccebe76bbdf0262097d8f747d5a05d0e569a544452eb328aada91bc SSDeep: 196608:iaDH9F7/iHXDI2CPKBUq6qMuGm9vqExoi93nnedBwzSlmKwDhANZbPhn:DDdFDX2J5uuGyCfi9uIQmlANRh |
|
|
Threads
Thread 0x980
314
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-06-09 09:41:42 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 100090 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 15012144872 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FlsAlloc, address_out = 0x76c34f2b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FlsGetValue, address_out = 0x76c31252 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FlsSetValue, address_out = 0x76c34208 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FlsFree, address_out = 0x76c3359f |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DecodePointer, address_out = 0x77169d35 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DecodePointer, address_out = 0x77169d35 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EncodePointer, address_out = 0x77170fcb |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DecodePointer, address_out = 0x77169d35 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_ERROR_HANDLE |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Module | Get Filename | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, file_name_orig = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\rruzcj.exe, size = 260 |
|
1 | |
| File | Open | - |
|
2 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| File | Open | - |
|
496 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = VirtualProtect, address_out = 0x76c3435f |
|
1 | |
| Module | Load | module_name = kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcAddress, address_out = 0x76c31222 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleHandleW, address_out = 0x76c334b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindNextFileW, address_out = 0x76c354ee |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindClose, address_out = 0x76c34442 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = MoveFileW, address_out = 0x76c49af0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileSizeEx, address_out = 0x76c359e2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetModuleFileNameW, address_out = 0x76c34950 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetFileAttributesW, address_out = 0x76c31b18 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExitProcess, address_out = 0x76c37a10 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCommandLineW, address_out = 0x76c35223 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameW, address_out = 0x76c3dd0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetComputerNameA, address_out = 0x76c4b6e0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateMutexW, address_out = 0x76c3424c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenW, address_out = 0x76c31700 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrlenA, address_out = 0x76c35a4b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcess, address_out = 0x76c31809 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForSingleObject, address_out = 0x76c31136 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLogicalDrives, address_out = 0x76c35371 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetTickCount, address_out = 0x76c3110c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteFileW, address_out = 0x76c389b3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WideCharToMultiByte, address_out = 0x76c3170d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = InitializeCriticalSectionAndSpinCount, address_out = 0x76c31916 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Sleep, address_out = 0x76c310ff |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = LeaveCriticalSection, address_out = 0x77152270 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReadFile, address_out = 0x76c33ed3 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateFileW, address_out = 0x76c33f5c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenMutexW, address_out = 0x76c35151 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = EnterCriticalSection, address_out = 0x771522b0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WaitForMultipleObjects, address_out = 0x76c34220 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiW, address_out = 0x76c4d5cd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = lstrcmpiA, address_out = 0x76c33e8e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = DeleteCriticalSection, address_out = 0x771645f5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ReleaseMutex, address_out = 0x76c3111e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CloseHandle, address_out = 0x76c31410 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVersion, address_out = 0x76c34467 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateThread, address_out = 0x76c334d5 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = ExpandEnvironmentStringsW, address_out = 0x76c34173 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceCounter, address_out = 0x76c31725 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = QueryPerformanceFrequency, address_out = 0x76c341f0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetCurrentProcessId, address_out = 0x76c311f8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFileAttributesW, address_out = 0x76c4d4f7 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetVolumeInformationW, address_out = 0x76c4c860 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = WriteFile, address_out = 0x76c31282 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetFilePointerEx, address_out = 0x76c4c807 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetEndOfFile, address_out = 0x76c4ce2e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = FindFirstFileW, address_out = 0x76c34435 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetProcessHeap, address_out = 0x76c314e9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapReAlloc, address_out = 0x77171f6e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapAlloc, address_out = 0x7715e026 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = HeapFree, address_out = 0x76c314c9 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreatePipe, address_out = 0x76cb415b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SetHandleInformation, address_out = 0x76c4195c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateProcessW, address_out = 0x76c3103d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringW, address_out = 0x76c33bca |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CompareStringA, address_out = 0x76c33c5a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = OpenProcess, address_out = 0x76c31986 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = TerminateProcess, address_out = 0x76c4d802 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetSystemTime, address_out = 0x76c35a96 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = SystemTimeToFileTime, address_out = 0x76c35a7e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = GetLastError, address_out = 0x76c311c0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = CreateToolhelp32Snapshot, address_out = 0x76c5735f |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32NextW, address_out = 0x76c5896c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Process32FirstW, address_out = 0x76c58baf |
|
1 | |
| Module | Load | module_name = advapi32.dll, base_address = 0x74d40000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegOpenKeyExW, address_out = 0x74d5468d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegQueryValueExW, address_out = 0x74d546ad |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegSetValueExW, address_out = 0x74d514d6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = RegCloseKey, address_out = 0x74d5469d |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenProcessToken, address_out = 0x74d54304 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = GetTokenInformation, address_out = 0x74d5431c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenSCManagerW, address_out = 0x74d4ca64 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = OpenServiceW, address_out = 0x74d4ca4c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = CloseServiceHandle, address_out = 0x74d5369c |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = ControlService, address_out = 0x74d67144 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = QueryServiceStatus, address_out = 0x74d52a86 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumDependentServicesW, address_out = 0x74d41e3a |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\advapi32.dll, function = EnumServicesStatusExW, address_out = 0x74d4b466 |
|
1 | |
| Module | Load | module_name = user32.dll, base_address = 0x74f40000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\user32.dll, function = SystemParametersInfoW, address_out = 0x74f590d3 |
|
1 | |
| Module | Load | module_name = Shell32.dll, base_address = 0x75fd0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\shell32.dll, function = ShellExecuteExW, address_out = 0x75ff1e46 |
|
1 | |
| Module | Load | module_name = ntdll.dll, base_address = 0x77130000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ntdll.dll, function = NtQuerySystemInformation, address_out = 0x7714fda0 |
|
1 | |
| Module | Load | module_name = mpr.dll, base_address = 0x74a90000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetCloseEnum, address_out = 0x74a92dd6 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetOpenEnumW, address_out = 0x74a92f06 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\mpr.dll, function = WNetEnumResourceW, address_out = 0x74a93058 |
|
1 | |
| Module | Load | module_name = ws2_32.dll, base_address = 0x75bc0000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = WSAStartup, address_out = 0x75bc3ab2 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = socket, address_out = 0x75bc3eb8 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = send, address_out = 0x75bc6f01 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = recv, address_out = 0x75bc6b0e |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = connect, address_out = 0x75bc6bdd |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = closesocket, address_out = 0x75bc3918 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = gethostbyname, address_out = 0x75bd7673 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = inet_addr, address_out = 0x75bc311b |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = ntohl, address_out = 0x75bc2d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htonl, address_out = 0x75bc2d57 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\ws2_32.dll, function = htons, address_out = 0x75bc2d8b |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 15199603787 |
|
1 | |
| System | Get Time | type = Ticks, time = 101775 |
|
3 | |
| System | Get Info | type = Operating System |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_5SR5S9A, desired_access = SYNCHRONIZE |
|
1 | |
| Mutex | Create | mutex_name = Global\syncronize_5SR5S9A |
|
1 | |
| Mutex | Open | mutex_name = Global\syncronize_5SR5S9U, desired_access = SYNCHRONIZE |
|
1 | |
| Mutex | Create | mutex_name = Global\syncronize_5SR5S9U |
|
1 | |
| System | Get Info | type = Operating System |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 |
Thread 0x998
3477
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| Module | Map | process_name = c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe, protection = PAGE_READWRITE |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| Process | Enumerate Processes | - |
|
1 | |
| System | Sleep | duration = 500 milliseconds (0.500 seconds) |
|
1 | |
| Service | Open Manager | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Service | Enumerate | database_name = SERVICES_ACTIVE_DATABASE |
|
1 | |
| Process | Enumerate Processes | - |
|
2 | |
|
For performance reasons, the remaining 288 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9a0
30
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Computer Name | result_out = XDUWTFONO |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
227 |
Thread 0x9a4
580
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = Ticks, time = 102336 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Get Time | type = Ticks, time = 102445 |
|
1 | |
| System | Get Time | type = Ticks, time = 102617 |
|
1 | |
| System | Get Time | type = Ticks, time = 102976 |
|
1 | |
| System | Get Time | type = Ticks, time = 103381 |
|
2 | |
| System | Get Time | type = Ticks, time = 103912 |
|
1 | |
| System | Get Time | type = Ticks, time = 104583 |
|
2 | |
| System | Get Time | type = Ticks, time = 104926 |
|
1 | |
| System | Get Time | type = Ticks, time = 105581 |
|
1 | |
| System | Get Time | type = Ticks, time = 105893 |
|
2 | |
| System | Get Time | type = Ticks, time = 106143 |
|
1 | |
| System | Get Time | type = Ticks, time = 106455 |
|
1 | |
| System | Get Time | type = Ticks, time = 106611 |
|
1 | |
| System | Get Time | type = Ticks, time = 107001 |
|
2 | |
| System | Get Time | type = Ticks, time = 107188 |
|
1 | |
| System | Get Time | type = Ticks, time = 107500 |
|
1 | |
| System | Get Time | type = Ticks, time = 107905 |
|
1 | |
| System | Get Time | type = Ticks, time = 108202 |
|
2 | |
| System | Get Time | type = Ticks, time = 108342 |
|
1 | |
| System | Get Time | type = Ticks, time = 108467 |
|
1 | |
| System | Get Time | type = Ticks, time = 108685 |
|
1 | |
| System | Get Time | type = Ticks, time = 108873 |
|
1 | |
| System | Get Time | type = Ticks, time = 109138 |
|
1 | |
| System | Get Time | type = Ticks, time = 109356 |
|
2 | |
| System | Get Time | type = Ticks, time = 109684 |
|
1 | |
| System | Get Time | type = Ticks, time = 110105 |
|
1 | |
| System | Get Time | type = Ticks, time = 110557 |
|
2 | |
| System | Get Time | type = Ticks, time = 110979 |
|
1 | |
| System | Get Time | type = Ticks, time = 111135 |
|
1 | |
| System | Get Time | type = Ticks, time = 111478 |
|
1 | |
| System | Get Time | type = Ticks, time = 111837 |
|
2 | |
| System | Get Time | type = Ticks, time = 112086 |
|
1 | |
| System | Get Time | type = Ticks, time = 112367 |
|
1 | |
| System | Get Time | type = Ticks, time = 112741 |
|
1 | |
| System | Get Time | type = Ticks, time = 112991 |
|
2 | |
| System | Get Time | type = Ticks, time = 113209 |
|
1 | |
| System | Get Time | type = Ticks, time = 113833 |
|
1 | |
| System | Get Time | type = Ticks, time = 114208 |
|
2 | |
| System | Get Time | type = Ticks, time = 114504 |
|
1 | |
| System | Get Time | type = Ticks, time = 115144 |
|
1 | |
| System | Get Time | type = Ticks, time = 115253 |
|
2 | |
| System | Get Time | type = Ticks, time = 115378 |
|
1 | |
| System | Get Time | type = Ticks, time = 115690 |
|
1 | |
| System | Get Time | type = Ticks, time = 116111 |
|
1 | |
| System | Get Time | type = Ticks, time = 116454 |
|
2 | |
| System | Get Time | type = Ticks, time = 116844 |
|
1 | |
| System | Get Time | type = Ticks, time = 117109 |
|
1 | |
| System | Get Time | type = Ticks, time = 117375 |
|
1 | |
| System | Get Time | type = Ticks, time = 117749 |
|
2 | |
| System | Get Time | type = Ticks, time = 118092 |
|
1 | |
| System | Get Time | type = Ticks, time = 118279 |
|
1 | |
| System | Get Time | type = Ticks, time = 118451 |
|
1 | |
| System | Get Time | type = Ticks, time = 118794 |
|
2 | |
| System | Get Time | type = Ticks, time = 118981 |
|
1 | |
| System | Get Time | type = Ticks, time = 119325 |
|
1 | |
| System | Get Time | type = Ticks, time = 119605 |
|
1 | |
| System | Get Time | type = Ticks, time = 119839 |
|
2 | |
| System | Get Time | type = Ticks, time = 120042 |
|
1 | |
| System | Get Time | type = Ticks, time = 120385 |
|
1 | |
| System | Get Time | type = Ticks, time = 121134 |
|
2 | |
| System | Get Time | type = Ticks, time = 121415 |
|
1 | |
| System | Get Time | type = Ticks, time = 121805 |
|
1 | |
| System | Get Time | type = Ticks, time = 122008 |
|
1 | |
| System | Get Time | type = Ticks, time = 122413 |
|
2 | |
| System | Get Time | type = Ticks, time = 122538 |
|
1 | |
| System | Get Time | type = Ticks, time = 122694 |
|
1 | |
| System | Get Time | type = Ticks, time = 122928 |
|
1 | |
| System | Get Time | type = Ticks, time = 123833 |
|
2 | |
| System | Get Time | type = Ticks, time = 124051 |
|
1 | |
| System | Get Time | type = Ticks, time = 124176 |
|
1 | |
| System | Get Time | type = Ticks, time = 124363 |
|
1 | |
| System | Get Time | type = Ticks, time = 124395 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 124566 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 125346 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 125736 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 125908 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126204 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126563 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126672 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126782 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126953 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 127780 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 128170 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 128342 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 128856 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129215 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129356 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129605 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129824 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 130354 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131040 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131337 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131446 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131852 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 132242 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 132569 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133412 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133552 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133739 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133958 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 134894 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135018 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135174 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135299 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135830 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135939 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136048 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136625 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136781 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136984 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 137483 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 138170 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 138560 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 138903 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139090 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139246 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139386 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139667 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139854 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 140088 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 140650 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141087 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141290 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141492 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141602 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141851 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 142210 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 142662 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 142787 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143333 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143442 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143552 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143723 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144098 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144222 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144378 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144893 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145034 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145143 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145486 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145892 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 146219 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 146640 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 146906 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 147186 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 147389 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 147498 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 148310 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 148466 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 148606 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 149277 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 149636 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 149838 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 150634 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151024 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151258 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151383 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151710 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 152069 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 152584 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 152771 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153052 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153224 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153442 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153848 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 154440 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 154752 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 154908 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 155579 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 155688 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 155907 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 156157 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 156547 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 156890 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157124 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157327 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157467 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157717 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157888 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158029 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158200 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158356 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158621 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158809 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159074 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159464 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159776 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159979 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160150 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160306 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160696 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160821 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160961 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161227 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161539 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161663 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161929 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162256 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162490 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162615 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162818 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163005 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163177 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163426 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163551 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163847 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164206 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164456 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164565 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164877 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165017 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165548 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165673 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165813 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166125 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166281 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166468 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166577 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166733 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166874 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167030 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167155 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167404 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167607 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167825 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168028 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168184 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168449 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168590 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168886 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168995 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169229 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169401 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169573 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169760 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170056 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170353 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170524 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170883 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171023 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171179 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171398 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171538 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171663 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171881 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172225 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172459 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172599 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172864 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173114 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173457 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173675 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173785 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174143 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174549 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174783 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174908 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175017 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175485 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175766 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175969 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 176125 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 176405 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 176764 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177045 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177217 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177357 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177716 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177887 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178246 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178387 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178589 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178699 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179057 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179525 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179681 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179900 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180149 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180259 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180446 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180961 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 181366 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 181694 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 181865 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182084 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182365 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182677 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182817 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182957 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 183301 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 183722 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 183956 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184081 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184221 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184564 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184673 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184954 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 185344 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 185734 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 |
Thread 0x9a8
584
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = Ticks, time = 102336 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Get Time | type = Ticks, time = 102445 |
|
1 | |
| System | Get Time | type = Ticks, time = 102617 |
|
1 | |
| System | Get Time | type = Ticks, time = 102976 |
|
1 | |
| System | Get Time | type = Ticks, time = 103381 |
|
2 | |
| System | Get Time | type = Ticks, time = 103912 |
|
1 | |
| System | Get Time | type = Ticks, time = 104583 |
|
2 | |
| System | Get Time | type = Ticks, time = 104926 |
|
1 | |
| System | Get Time | type = Ticks, time = 105581 |
|
1 | |
| System | Get Time | type = Ticks, time = 105893 |
|
2 | |
| System | Get Time | type = Ticks, time = 106143 |
|
1 | |
| System | Get Time | type = Ticks, time = 106455 |
|
1 | |
| System | Get Time | type = Ticks, time = 106611 |
|
1 | |
| System | Get Time | type = Ticks, time = 107001 |
|
2 | |
| System | Get Time | type = Ticks, time = 107188 |
|
1 | |
| System | Get Time | type = Ticks, time = 107500 |
|
1 | |
| System | Get Time | type = Ticks, time = 107905 |
|
1 | |
| System | Get Time | type = Ticks, time = 108202 |
|
2 | |
| System | Get Time | type = Ticks, time = 108342 |
|
1 | |
| System | Get Time | type = Ticks, time = 108467 |
|
1 | |
| System | Get Time | type = Ticks, time = 108685 |
|
1 | |
| System | Get Time | type = Ticks, time = 108873 |
|
1 | |
| System | Get Time | type = Ticks, time = 109138 |
|
1 | |
| System | Get Time | type = Ticks, time = 109356 |
|
2 | |
| System | Get Time | type = Ticks, time = 109684 |
|
1 | |
| System | Get Time | type = Ticks, time = 110105 |
|
1 | |
| System | Get Time | type = Ticks, time = 110557 |
|
2 | |
| System | Get Time | type = Ticks, time = 110979 |
|
1 | |
| System | Get Time | type = Ticks, time = 111135 |
|
1 | |
| System | Get Time | type = Ticks, time = 111478 |
|
1 | |
| System | Get Time | type = Ticks, time = 111837 |
|
2 | |
| System | Get Time | type = Ticks, time = 112086 |
|
1 | |
| System | Get Time | type = Ticks, time = 112367 |
|
1 | |
| System | Get Time | type = Ticks, time = 112741 |
|
1 | |
| System | Get Time | type = Ticks, time = 112991 |
|
2 | |
| System | Get Time | type = Ticks, time = 113209 |
|
1 | |
| System | Get Time | type = Ticks, time = 113833 |
|
1 | |
| System | Get Time | type = Ticks, time = 114208 |
|
2 | |
| System | Get Time | type = Ticks, time = 114504 |
|
1 | |
| System | Get Time | type = Ticks, time = 115144 |
|
1 | |
| System | Get Time | type = Ticks, time = 115253 |
|
2 | |
| System | Get Time | type = Ticks, time = 115378 |
|
1 | |
| System | Get Time | type = Ticks, time = 115690 |
|
1 | |
| System | Get Time | type = Ticks, time = 116111 |
|
1 | |
| System | Get Time | type = Ticks, time = 116454 |
|
2 | |
| System | Get Time | type = Ticks, time = 116844 |
|
1 | |
| System | Get Time | type = Ticks, time = 117109 |
|
1 | |
| System | Get Time | type = Ticks, time = 117375 |
|
1 | |
| System | Get Time | type = Ticks, time = 117749 |
|
2 | |
| System | Get Time | type = Ticks, time = 118092 |
|
1 | |
| System | Get Time | type = Ticks, time = 118279 |
|
1 | |
| System | Get Time | type = Ticks, time = 118451 |
|
1 | |
| System | Get Time | type = Ticks, time = 118794 |
|
2 | |
| System | Get Time | type = Ticks, time = 118981 |
|
1 | |
| System | Get Time | type = Ticks, time = 119325 |
|
1 | |
| System | Get Time | type = Ticks, time = 119605 |
|
1 | |
| System | Get Time | type = Ticks, time = 119839 |
|
2 | |
| System | Get Time | type = Ticks, time = 120042 |
|
1 | |
| System | Get Time | type = Ticks, time = 120385 |
|
1 | |
| System | Get Time | type = Ticks, time = 121134 |
|
2 | |
| System | Get Time | type = Ticks, time = 121415 |
|
1 | |
| System | Get Time | type = Ticks, time = 121805 |
|
1 | |
| System | Get Time | type = Ticks, time = 122008 |
|
1 | |
| System | Get Time | type = Ticks, time = 122413 |
|
2 | |
| System | Get Time | type = Ticks, time = 122538 |
|
1 | |
| System | Get Time | type = Ticks, time = 122694 |
|
1 | |
| System | Get Time | type = Ticks, time = 122928 |
|
1 | |
| System | Get Time | type = Ticks, time = 123833 |
|
2 | |
| System | Get Time | type = Ticks, time = 124051 |
|
1 | |
| System | Get Time | type = Ticks, time = 124176 |
|
1 | |
| System | Get Time | type = Ticks, time = 124363 |
|
1 | |
| System | Get Time | type = Ticks, time = 124395 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 124566 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 125346 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 125736 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 125908 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126204 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126563 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126672 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126782 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 126953 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 127780 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 128186 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 128342 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 128856 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129215 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129356 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129605 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 129839 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 130354 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131040 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131337 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131446 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 131836 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 132242 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 132554 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133412 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133552 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133739 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 133958 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 134894 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135018 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135174 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135299 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135830 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 135939 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136048 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136625 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136781 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 136984 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 137483 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 138170 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 138560 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 138903 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139090 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139246 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139386 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139667 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 139854 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 140088 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 140650 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141180 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141290 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141492 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141602 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 141836 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 142210 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 142662 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 142787 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143333 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143442 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143552 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 143723 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144098 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144222 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144378 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 144893 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145034 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145143 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145486 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 145892 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 146219 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 146640 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 146906 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 147186 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 147389 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 147498 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 148310 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 148466 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 148606 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 149277 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 149620 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 149838 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 150634 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 150993 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151133 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151320 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151632 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 151788 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 152100 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 152584 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 152771 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153036 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153224 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153442 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 153848 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 154425 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 154690 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 154830 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 155049 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 155642 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 155891 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 156079 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 156359 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 156547 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 156890 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157124 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157327 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157467 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157717 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 157888 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158029 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158200 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158356 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158621 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 158809 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159074 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159464 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159776 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 159979 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160150 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160306 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160712 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 160946 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161195 |
|
2 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161507 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161663 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 161929 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162241 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162459 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162568 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162677 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 162865 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163067 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163177 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163426 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163551 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 163910 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164222 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164456 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164565 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 164877 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165017 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165548 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165673 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 165813 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166141 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166281 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166468 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166577 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166733 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 166874 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167030 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167155 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167404 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167607 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 167825 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168013 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168184 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168449 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168590 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168886 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 168995 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169229 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169401 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169526 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 169744 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170041 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170353 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170524 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 170883 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171023 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171179 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171398 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171538 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171663 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 171881 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172225 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172459 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172599 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 172864 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173114 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173457 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173675 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 173785 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174143 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174549 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174783 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 174908 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175017 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175485 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175766 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 175953 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 176125 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 176405 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 176764 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177045 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177217 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177357 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177716 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 177887 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178246 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178387 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178589 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 178699 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179057 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179525 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179681 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 179900 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180149 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180259 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180446 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 180961 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 181366 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 181694 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 181865 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182084 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182365 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182677 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182817 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 182957 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 183301 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 183722 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 183956 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184081 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184221 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184564 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184673 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 184970 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 185344 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| System | Get Time | type = Ticks, time = 185734 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 |
Thread 0x9c4
20359
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = size, size_out = 129 |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, size = 1048560, size_out = 129 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 144 |
|
1 | |
| File | Read | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 234 |
|
1 | |
| File | Delete | filename = C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000\desktop.ini |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 246 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1608 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1608 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1616 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, type = size, size_out = 1800 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, size = 1048560, size_out = 1800 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1808 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1852 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1852 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1856 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 6241 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 6241 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 6256 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, type = size, size_out = 9503 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml, size = 1048560, size_out = 9503 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 9504 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1872 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, type = size, size_out = 5557 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, size = 1048560, size_out = 5557 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 5568 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, type = size, size_out = 16852 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, size = 1048560, size_out = 16852 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 16864 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 20577 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 20577 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 20592 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, type = size, size_out = 8723 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, size = 1048560, size_out = 8723 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 8736 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, type = size, size_out = 15067 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, size = 1048560, size_out = 15067 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.EPS |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, type = size, size_out = 1069 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, size = 1048560, size_out = 1069 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 62976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, type = size, size_out = 215 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, type = size, size_out = 1437 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml, type = size, size_out = 219 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml, type = size, size_out = 924 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml, type = size, size_out = 215 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml, type = size, size_out = 749 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml, type = size, size_out = 749 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat, type = size, size_out = 207 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat, type = size, size_out = 815680 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat, type = size, size_out = 1349 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, size = 1048560, size_out = 1349 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 832 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, type = size, size_out = 2624 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, size = 1048560, size_out = 2624 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, type = size, size_out = 1565 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, size = 1048560, size_out = 1565 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, type = size, size_out = 2296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, size = 1048560, size_out = 2296 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2304 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, type = size, size_out = 913 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, size = 1048560, size_out = 913 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, type = size, size_out = 596341 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, size = 1048560, size_out = 596341 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 596352 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, type = size, size_out = 71236 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, size = 1048560, size_out = 71236 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 71248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, type = size, size_out = 1383 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 1048560, size_out = 1383 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 242 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\Office32MUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, type = size, size_out = 1886 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, size = 1048560, size_out = 1886 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, type = size, size_out = 811 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1048560, size_out = 811 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 816 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, type = size, size_out = 1608 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, size = 1048560, size_out = 1608 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1616 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, type = size, size_out = 6241 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, size = 1048560, size_out = 6241 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, size = 6256 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, type = size, size_out = 6406 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, type = size, size_out = 2920 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, type = size, size_out = 7498 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, type = size, size_out = 235 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, type = size, size_out = 4222 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 152300 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 2209 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 4192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg, type = size, size_out = 26036 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 2848 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, size = 1048560, size_out = 2848 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, size = 2864 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, type = size, size_out = 1925 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, size = 1048560, size_out = 1925 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1936 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, type = size, size_out = 27407 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 1048560, size_out = 27407 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 27408 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, type = size, size_out = 3479 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, size = 1048560, size_out = 3479 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, type = size, size_out = 31837 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, size = 1048560, size_out = 31837 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 31840 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, type = size, size_out = 2044 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, size = 1048560, size_out = 2044 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2048 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, type = size, size_out = 29925 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 29925 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 29936 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, type = size, size_out = 1363 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, size = 1048560, size_out = 1363 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1376 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, type = size, size_out = 20371 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, size = 1048560, size_out = 20371 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 20384 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, type = size, size_out = 1287 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, size = 1048560, size_out = 1287 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1296 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, type = size, size_out = 26402 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, size = 1048560, size_out = 26402 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 26416 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, type = size, size_out = 1354 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, size = 1048560, size_out = 1354 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, type = size, size_out = 5120 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 5120 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 5136 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, type = size, size_out = 19485 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 1048560, size_out = 19485 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 19488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, type = size, size_out = 48115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 1048560, size_out = 48115 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 48128 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, type = size, size_out = 11573 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, size = 1048560, size_out = 11573 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 11584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, type = size, size_out = 1423 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, size = 1048560, size_out = 1423 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1424 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, type = size, size_out = 15737 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, size = 1048560, size_out = 15737 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15744 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, type = size, size_out = 3970 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, size = 1048560, size_out = 3970 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3984 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, type = size, size_out = 53115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, size = 1048560, size_out = 53115 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 53120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 31975 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, size = 1048560, size_out = 31975 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 31984 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, type = size, size_out = 2527 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, size = 1048560, size_out = 2527 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2528 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\PREVIEW.GIF, type = size, size_out = 19525 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 19525 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 19536 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\THMBNAIL.PNG, type = size, size_out = 1737 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, size = 1048560, size_out = 1737 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1744 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\PREVIEW.GIF, type = size, size_out = 33479 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, size = 1048560, size_out = 33479 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 33488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\THMBNAIL.PNG, type = size, size_out = 58026 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, size = 1048560, size_out = 58026 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 58032 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBHW6.CHM, type = size, size_out = 123956 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, size = 1048560, size_out = 123956 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 123968 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBOB6.CHM, type = size, size_out = 416918 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, size = 1048560, size_out = 416918 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 416928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini, type = size, size_out = 14610 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\adojavas.inc, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\adojavas.inc.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\adojavas.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 3304 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 49904 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 77208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 85208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 157208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 165208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 189214 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 237208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1545 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 9115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1369 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1285 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4726 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 27281 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3878 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5059 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 27281 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3878 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3215 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5059 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 23711 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4570 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 2820 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 10254 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 2374 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 27581 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 2899 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 10888 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 108525 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 20346 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 233668 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4968 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3143 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4842 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4570 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 2821 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 6203 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 5025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 27789 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3823 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4456 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3076 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 693292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 781292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4525 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3055 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 25243 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 6922 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4959 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4503 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3082 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3108 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 533292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv, type = file_attributes |
|
1 | |
|
For performance reasons, the remaining 4800 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9c8
11935
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\BCD, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG1, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BCD.LOG1, type = size, size_out = 0 |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG2, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BCD.LOG2, type = size, size_out = 0 |
|
1 | |
| File | Create | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = size, size_out = 89168 |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\cs-CZ\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\cs-CZ\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui, type = size, size_out = 87616 |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\da-DK\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\da-DK\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui, type = size, size_out = 91712 |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\de-DE\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\de-DE\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 94800 |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\el-GR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\en-US\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 85056 |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\en-US\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\en-US\memtest.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 43600 |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\memtest.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\en-US\memtest.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\en-US\memtest.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\es-ES\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 90192 |
|
1 | |
| File | Get Info | filename = C:\Boot\es-ES\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\es-ES\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\es-ES\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\fi-FI\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 89152 |
|
1 | |
| File | Get Info | filename = C:\Boot\fi-FI\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\fi-FI\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\fi-FI\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\Fonts\chs_boot.ttf, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\el-GR\bootmgr.exe.mui, type = size, size_out = 3694080 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\chs_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\chs_boot.ttf, destination_filename = C:\Boot\Fonts\chs_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = \??\C:\Boot\Fonts\wgl4_boot.ttf, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 47452 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\wgl4_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\wgl4_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\Fonts\wgl4_boot.ttf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 93248 |
|
1 | |
| File | Get Info | filename = C:\Boot\fr-FR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\fr-FR\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\fr-FR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 90688 |
|
1 | |
| File | Get Info | filename = C:\Boot\hu-HU\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\hu-HU\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\hu-HU\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\it-IT\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 90704 |
|
1 | |
| File | Get Info | filename = C:\Boot\it-IT\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\it-IT\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\it-IT\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 76352 |
|
1 | |
| File | Get Info | filename = C:\Boot\ja-JP\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\ja-JP\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\ja-JP\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 75344 |
|
1 | |
| File | Get Info | filename = C:\Boot\ko-KR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\ko-KR\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\ko-KR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\memtest.exe, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 485760 |
|
1 | |
| File | Get Info | filename = C:\Boot\memtest.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\memtest.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\memtest.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\nb-NO\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 88144 |
|
1 | |
| File | Get Info | filename = C:\Boot\nb-NO\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\nb-NO\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\nb-NO\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\nl-NL\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 90704 |
|
1 | |
| File | Get Info | filename = C:\Boot\nl-NL\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\nl-NL\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\nl-NL\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\pl-PL\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 90704 |
|
1 | |
| File | Get Info | filename = C:\Boot\pl-PL\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\pl-PL\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\pl-PL\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\pt-BR\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 90176 |
|
1 | |
| File | Get Info | filename = C:\Boot\pt-BR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\pt-BR\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\pt-BR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\pt-PT\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 89664 |
|
1 | |
| File | Get Info | filename = C:\Boot\pt-PT\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\pt-PT\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\pt-PT\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\ru-RU\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 90192 |
|
1 | |
| File | Get Info | filename = C:\Boot\ru-RU\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\ru-RU\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\ru-RU\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\sv-SE\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 87616 |
|
1 | |
| File | Get Info | filename = C:\Boot\sv-SE\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\sv-SE\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\sv-SE\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\tr-TR\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 87104 |
|
1 | |
| File | Get Info | filename = C:\Boot\tr-TR\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\tr-TR\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\tr-TR\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\zh-CN\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 70720 |
|
1 | |
| File | Get Info | filename = C:\Boot\zh-CN\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\zh-CN\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\zh-CN\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\zh-HK\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 70224 |
|
1 | |
| File | Get Info | filename = C:\Boot\zh-HK\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\zh-HK\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\zh-HK\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Boot\zh-TW\bootmgr.exe.mui, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 70208 |
|
1 | |
| File | Get Info | filename = C:\Boot\zh-TW\bootmgr.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\zh-TW\bootmgr.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\zh-TW\bootmgr.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\bootmgr, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 383786 |
|
1 | |
| File | Get Info | filename = C:\bootmgr, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\bootmgr.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\bootmgr, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\hiberfil.sys, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 16972987 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, type = size, size_out = 2865664 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, type = size, size_out = 2522624 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, type = size, size_out = 875520 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, size = 1048560, size_out = 875520 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, size = 875536 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, type = size, size_out = 881152 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, size = 1048560, size_out = 881152 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 881168 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, type = size, size_out = 21064532 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, type = size, size_out = 2507776 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786694 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, type = size, size_out = 526176 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, size = 1048560, size_out = 526176 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 526192 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwdcw20.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, type = size, size_out = 3702272 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786694 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, type = size, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, size = 1048560, size_out = 868864 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 868880 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 715840 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 260 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, type = size, size_out = 222948913 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW2.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBUI6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 174448 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\ose.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 415024 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 329096 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 329104 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\setup.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 174448 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\ose.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 329096 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 329104 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\first-nc-parking.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\first-nc-parking.exe, type = size, size_out = 75776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\first-nc-parking.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\first-nc-parking.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\first-nc-parking.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, type = size, size_out = 1369952 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 321392 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 321408 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, type = size, size_out = 1486736 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 438176 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 438192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl, type = size, size_out = 241024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, size = 1048560, size_out = 241024 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 241040 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\JPEGIM32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, type = size, size_out = 1908 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, size = 1048560, size_out = 1908 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1920 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.CGM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, type = size, size_out = 1382 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, size = 1048560, size_out = 1382 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.WPG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, type = size, size_out = 73080 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, size = 1048560, size_out = 73080 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 73088 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PICTIM32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, type = size, size_out = 1831424 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\ITIRCL55.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, type = size, size_out = 55680 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, size = 1048560, size_out = 55680 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 55696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 250 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, type = size, size_out = 1388416 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, size = 1048560, size_out = 339856 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 339872 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 252 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 11656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, size = 1048560, size_out = 11656 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 11664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, type = size, size_out = 43408 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, size = 1048560, size_out = 43408 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 43424 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEERR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, type = size, size_out = 1012648 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, size = 1048560, size_out = 1012648 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1012656 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEES.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, type = size, size_out = 342960 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, size = 1048560, size_out = 342960 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 342976 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODBC.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, type = size, size_out = 15800 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, size = 1048560, size_out = 15800 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15808 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODDBS.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, type = size, size_out = 15800 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, size = 1048560, size_out = 15800 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15808 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODEXL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, type = size, size_out = 451480 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, size = 1048560, size_out = 451480 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 451488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACER3X.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, type = size, size_out = 385368 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, size = 1048560, size_out = 385368 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 385376 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ATLCONV.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, type = size, size_out = 5072816 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786682 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL, type = size, size_out = 71032 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL, size = 1048560, size_out = 71032 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 71040 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE, type = size, size_out = 473952 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE, size = 1048560, size_out = 473952 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 473968 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOICONS.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll, type = size, size_out = 1269648 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL, type = size, size_out = 56144 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL, size = 1048560, size_out = 56144 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 56160 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE, type = size, size_out = 121168 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE, size = 1048560, size_out = 121168 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 121184 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL, type = size, size_out = 24976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL, size = 1048560, size_out = 24976 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 24992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUOPTIN.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, type = size, size_out = 7379816 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSETUP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL, type = size, size_out = 9568 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL, size = 1048560, size_out = 9568 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 9584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OFFREL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, type = size, size_out = 18336 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, size = 1048560, size_out = 18336 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 18352 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPTINPS.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, type = size, size_out = 752552 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL, size = 1048560, size_out = 752552 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 752560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJ11OD11.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, type = size, size_out = 591736 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, size = 1048560, size_out = 591736 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 591744 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 813824 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, size = 1048560, size_out = 813824 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 813840 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 295663 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX, size = 1048560, size_out = 295663 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 295664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_FR.LEX |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL, type = size, size_out = 13696 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL, size = 1048560, size_out = 13696 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 13712 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 248 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.IDX_DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL, type = size, size_out = 123776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL, size = 1048560, size_out = 123776 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 123792 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, type = size, size_out = 13684 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, size = 1048560, size_out = 13684 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB.id-9C354B42.[restdoc@protonmail.com].zoh, size = 13696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE, type = size, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE, size = 1048560, size_out = 174440 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 174448 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL, type = size, size_out = 146808 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL, size = 1048560, size_out = 146808 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 146816 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL, type = size, size_out = 555 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF, size = 1048560, size_out = 555 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.INF, type = size, size_out = 69575 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM, size = 1048560, size_out = 69575 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 69584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.ELM, type = size, size_out = 100798 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM, size = 1048560, size_out = 100798 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 100800 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF, type = size, size_out = 534 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF, size = 1048560, size_out = 534 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 544 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM, type = size, size_out = 49850 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM, size = 1048560, size_out = 49850 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 49856 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF, type = size, size_out = 551 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF, size = 1048560, size_out = 551 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\BLUECALM.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM, type = size, size_out = 55942 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM, size = 1048560, size_out = 55942 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 55952 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF, type = size, size_out = 549 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF, size = 1048560, size_out = 549 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT\BLUEPRNT.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM, type = size, size_out = 60154 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM, size = 1048560, size_out = 60154 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 60160 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF, type = size, size_out = 596 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF, size = 1048560, size_out = 596 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\BOLDSTRI.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM, type = size, size_out = 107831 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM, size = 1048560, size_out = 107831 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 107840 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF, type = size, size_out = 480 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF, size = 1048560, size_out = 480 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 496 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF, type = size, size_out = 503 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF, size = 1048560, size_out = 503 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 512 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.INF, type = size, size_out = 529 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF, size = 1048560, size_out = 529 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 544 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 429 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF, size = 1048560, size_out = 429 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM, type = size, size_out = 500 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF, size = 1048560, size_out = 500 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 512 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.INF, type = size, size_out = 444 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF, size = 1048560, size_out = 444 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 448 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.INF, type = size, size_out = 85056 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM, size = 1048560, size_out = 85056 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 85072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.ELM, type = size, size_out = 500 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF, size = 1048560, size_out = 500 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 512 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM, type = size, size_out = 54687 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM, size = 1048560, size_out = 54687 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 54688 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.ELM, type = size, size_out = 57906 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM, size = 1048560, size_out = 57906 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 57920 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.ELM, type = size, size_out = 625 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF, size = 1048560, size_out = 625 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE\STRTEDGE.INF, type = size, size_out = 49133 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM, size = 1048560, size_out = 49133 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 49136 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.ELM, type = size, size_out = 578 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF, size = 1048560, size_out = 578 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF, type = size, size_out = 106004 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM, size = 1048560, size_out = 106004 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 106016 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM, type = size, size_out = 943322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\MSB1ENFR.ITS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\MSB1ENFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\MSB1ENFR.ITS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR\MSB1ENFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
|
For performance reasons, the remaining 2440 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9cc
18689
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\BCD.LOG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\BOOTSTAT.DAT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\BOOTSTAT.DAT, type = size, size_out = 65536 |
|
1 | |
| File | Get Info | filename = C:\Boot\BOOTSTAT.DAT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Boot\BOOTSTAT.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Boot\BOOTSTAT.DAT, size = 1048560, size_out = 65536 |
|
1 | |
| File | Write | filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 65552 |
|
1 | |
| File | Read | filename = C:\Boot\BOOTSTAT.DAT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Boot\BOOTSTAT.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Boot\BOOTSTAT.DAT |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2296 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2296 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2304 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1886 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1886 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1360 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, type = size, size_out = 1457 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, size = 1048560, size_out = 1457 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1472 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, type = size, size_out = 1458 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, size = 1048560, size_out = 1458 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1472 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = size, size_out = 811 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, size = 1048560, size_out = 811 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 816 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1988 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1988 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2000 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, type = size, size_out = 596341 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, size = 1048560, size_out = 596341 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 596352 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, type = size, size_out = 596341 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, size = 1048560, size_out = 596341 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 596352 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 832 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4288 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, type = size, size_out = 6421 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, size = 1048560, size_out = 6421 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 6432 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 16683 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 16683 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 16688 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4288 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi, type = size, size_out = 33280 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = size, size_out = 197120 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = size, size_out = 224256 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = size, size_out = 222208 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = size, size_out = 194048 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1600388 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1434 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 212 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 384 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 392 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 727 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 3150 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 247 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 3161 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 3166 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 738 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 804 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 488 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 617 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 16616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 15097 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 9803 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 11067 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 10947 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 38485 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 1218 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi, type = size, size_out = 209 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = size, size_out = 471 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat, type = size, size_out = 1166 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3053984 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 2227968 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3195696 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4120784 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml, type = size, size_out = 2592 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml, type = size, size_out = 2462 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml, type = size, size_out = 2436 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, type = size, size_out = 2556 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, type = size, size_out = 2514 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2578 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 3024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2658 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2628 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2652 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2526 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2522 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2568 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2626 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2580 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2246 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2240 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml, type = size, size_out = 2644 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 2542 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 2568 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 2596 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 2520 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = \??\C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM, desired_access = FILE_READ_ATTRIBUTES, SYNCHRONIZE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 1680383 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ADO210.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, type = size, size_out = 27195 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 1048560, size_out = 27195 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 27200 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, type = size, size_out = 2362 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, size = 1048560, size_out = 2362 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2368 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, type = size, size_out = 1606 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, size = 1048560, size_out = 1606 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1616 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, type = size, size_out = 1988 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 1048560, size_out = 1988 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2000 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, type = size, size_out = 3186 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, size = 1048560, size_out = 3186 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3200 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, type = size, size_out = 1457 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, size = 1048560, size_out = 1457 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1472 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, type = size, size_out = 1458 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML, size = 1048560, size_out = 1458 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1472 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, type = size, size_out = 16852 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, size = 1048560, size_out = 16852 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 16864 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, type = size, size_out = 8723 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, size = 1048560, size_out = 8723 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 8736 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\VisiorWW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, type = size, size_out = 2424 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, size = 1048560, size_out = 2424 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 2432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, type = size, size_out = 1800 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, size = 1048560, size_out = 1800 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1808 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, type = size, size_out = 8918 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, size = 1048560, size_out = 8918 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 8928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\DATES.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, type = size, size_out = 1844 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, size = 1048560, size_out = 1844 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1856 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\PHONE.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, type = size, size_out = 39017 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, size = 1048560, size_out = 39017 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 39024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.DAT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, type = size, size_out = 2687 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, size = 1048560, size_out = 2687 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2688 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\STOCKS.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 255 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg, type = size, size_out = 2950 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, type = size, size_out = 34916 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, size = 1048560, size_out = 34916 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 34928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, type = size, size_out = 2181 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, size = 1048560, size_out = 2181 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, type = size, size_out = 20627 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, size = 1048560, size_out = 20627 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 20640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, type = size, size_out = 1560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, size = 1048560, size_out = 1560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, type = size, size_out = 33009 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, size = 1048560, size_out = 33009 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 33024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, type = size, size_out = 2722 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, size = 1048560, size_out = 2722 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2736 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, type = size, size_out = 43276 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, size = 1048560, size_out = 43276 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 43280 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, type = size, size_out = 945 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, size = 1048560, size_out = 945 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 960 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, type = size, size_out = 32607 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, size = 1048560, size_out = 32607 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 32608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, type = size, size_out = 1293 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, size = 1048560, size_out = 1293 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 1296 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, type = size, size_out = 3957 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, size = 1048560, size_out = 3957 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3968 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, type = size, size_out = 33277 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, size = 1048560, size_out = 33277 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 33280 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, type = size, size_out = 1453 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 1453 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, type = size, size_out = 2552 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, size = 1048560, size_out = 2552 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, type = size, size_out = 18817 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, size = 1048560, size_out = 18817 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 18832 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 33559 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1048560, size_out = 33559 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 33568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG |
|
1 | |
| File | Get Info | type = size, size_out = 44850 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 1048560, size_out = 44850 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 44864 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\THMBNAIL.PNG, type = size, size_out = 1339 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 1339 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1344 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 4100 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, size = 1048560, size_out = 4100 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4112 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\PREVIEW.GIF, type = size, size_out = 47962 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, size = 1048560, size_out = 47962 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 47968 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 29305 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, size = 1048560, size_out = 29305 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 29312 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\THMBNAIL.PNG, type = size, size_out = 2668 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, size = 1048560, size_out = 2668 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2672 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\PREVIEW.GIF, type = size, size_out = 42453 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, size = 1048560, size_out = 42453 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 42464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\THMBNAIL.PNG, type = size, size_out = 1571 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, size = 1048560, size_out = 1571 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF, type = size, size_out = 30170 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 30170 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 30176 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\THMBNAIL.PNG, type = size, size_out = 334427 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, size = 1048560, size_out = 334427 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 334432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\FM20.CHM, type = size, size_out = 109718 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, size = 1048560, size_out = 109718 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 109728 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBCN6.CHM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\adovbs.inc, type = size, size_out = 716 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, size = 1048560, size_out = 716 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[restdoc@protonmail.com].zoh, size = 720 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.id-9C354B42.[restdoc@protonmail.com].zoh, size = 252 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = size, size_out = 630 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\adcjavas.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = size, size_out = 623 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\adcvbs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = size, size_out = 9804 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = size, size_out = 9975 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config, type = size, size_out = 174 |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\desktop.ini, size = 1048560, size_out = 174 |
|
1 | |
| File | Write | filename = C:\Program Files\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, size = 176 |
|
1 | |
| File | Read | filename = C:\Program Files\desktop.ini, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\desktop.ini |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini, type = size, size_out = 27935 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DissolveAnother.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini, type = size, size_out = 751669 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DissolveNoise.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 10123 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3286 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png, type = file_attributes |
|
1 | |
|
For performance reasons, the remaining 4166 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9d0
12156
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\Fonts\cht_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml, type = size, size_out = 3876772 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\cht_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\cht_boot.ttf, destination_filename = C:\Boot\Fonts\cht_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, type = size, size_out = 70361744 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, type = size, size_out = 43806141 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, type = size, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, size = 1048560, size_out = 868864 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 868880 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, type = size, size_out = 873984 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, size = 1048560, size_out = 873984 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 874000 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 242 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, type = size, size_out = 2928955 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, type = size, size_out = 3124224 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786698 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, type = size, size_out = 2797568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, type = size, size_out = 17456632 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OnoteLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 8265165 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, type = size, size_out = 519584 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, size = 1048560, size_out = 519584 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 519600 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, type = size, size_out = 868864 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, size = 1048560, size_out = 868864 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 868880 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, size = 1048560, size_out = 3584 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3600 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\ShellUI.MST |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, type = size, size_out = 27532288 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPlusrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, type = size, size_out = 10798080 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjProrWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
1 | |
| File | Read | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, size = 262144, size_out = 262144 |
|
2 | |
| File | Write | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, size = 786694 |
|
1 | |
| File | Write | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png, type = size, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, type = size, size_out = 195011319 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 994184 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 994184 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 994192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DW20.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, type = size, size_out = 2124664 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, type = size, size_out = 712592 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 712592 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 712608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, type = size, size_out = 302976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, size = 1048560, size_out = 302976 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 302992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\PNG32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, type = size, size_out = 430080 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 430080 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 430096 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, type = size, size_out = 1704448 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll, type = size, size_out = 507904 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe, type = size, size_out = 1547264 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, type = size, size_out = 6331392 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll, type = size, size_out = 49664 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 1071616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, type = size, size_out = 2528128 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSOINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, type = size, size_out = 105344 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, size = 1048560, size_out = 105344 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 105360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\xlsrvintl.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, type = size, size_out = 15800 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, size = 1048560, size_out = 15800 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15808 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEODTXT.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 537504 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, size = 1048560, size_out = 537504 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 537520 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL, type = size, size_out = 318368 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL, size = 1048560, size_out = 318368 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 318384 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWSS.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, type = size, size_out = 4297568 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF.id-9C354B42.[restdoc@protonmail.com].zoh, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL, type = size, size_out = 518984 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL, size = 1048560, size_out = 518984 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 518992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXPSRV.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE, type = size, size_out = 157024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE, size = 1048560, size_out = 157024 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 157040 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\FLTLDR.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, type = size, size_out = 204168 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, size = 1048560, size_out = 204168 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 204176 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\LICLUA.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL, type = size, size_out = 25417600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786682 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL, type = size, size_out = 705392 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL, size = 1048560, size_out = 705392 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 705408 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSSOAP30.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL, type = size, size_out = 571320 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe, size = 1048560, size_out = 571320 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 571328 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll, type = size, size_out = 15760 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll, size = 1048560, size_out = 15760 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15776 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, type = size, size_out = 15736 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, size = 1048560, size_out = 15736 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15744 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 260 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, type = size, size_out = 1377144 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, size = 1048560, size_out = 328584 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 328592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, type = size, size_out = 19848 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, size = 1048560, size_out = 19848 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 19856 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\OPHPROXY.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, type = size, size_out = 1870696 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RICHED20.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, type = size, size_out = 148736 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, size = 1048560, size_out = 148736 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 148752 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL, type = size, size_out = 1828608 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms, type = size, size_out = 11646 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms, size = 1048560, size_out = 11646 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 11648 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 296 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL, type = size, size_out = 2173696 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE, type = size, size_out = 15712 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE, size = 1048560, size_out = 15712 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15728 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE, type = size, size_out = 4925184 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
2 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX, size = 262144 |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF, type = size, size_out = 395651 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX, size = 1048560, size_out = 395651 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 395664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_ES.LEX |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL, type = size, size_out = 98176 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL, size = 1048560, size_out = 98176 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 98192 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FDATE.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL, type = size, size_out = 217984 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL, size = 1048560, size_out = 217984 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 218000 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPERSON.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL, type = size, size_out = 234880 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL, size = 1048560, size_out = 234880 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234896 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IETAG.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL, type = size, size_out = 101248 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL, size = 1048560, size_out = 101248 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 101264 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\IMCONTACT.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV, type = size, size_out = 36712 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV, size = 1048560, size_out = 36712 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, size = 36720 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\RECOVR32.CNV |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM, type = size, size_out = 58766 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM, size = 1048560, size_out = 58766 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 58768 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\AFTRNOON.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF, type = size, size_out = 513 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF, size = 1048560, size_out = 513 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 528 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\ARCTIC.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM, type = size, size_out = 57786 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM, size = 1048560, size_out = 57786 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 57792 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM, type = size, size_out = 71388 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM, size = 1048560, size_out = 71388 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 71392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM, type = size, size_out = 118577 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM, size = 1048560, size_out = 118577 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 118592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.ELM, type = size, size_out = 103737 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM, size = 1048560, size_out = 103737 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 103744 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.ELM, type = size, size_out = 99561 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM, size = 1048560, size_out = 99561 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 99568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.ELM, type = size, size_out = 549 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF, size = 1048560, size_out = 549 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\INDUST.INF, type = size, size_out = 65885 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM, size = 1048560, size_out = 65885 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 65888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.ELM, type = size, size_out = 462 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF, size = 1048560, size_out = 462 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\IRIS.INF, type = size, size_out = 47666 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM, size = 1048560, size_out = 47666 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 47680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.ELM, type = size, size_out = 499 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF, size = 1048560, size_out = 499 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 512 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\JOURNAL.INF, type = size, size_out = 59203 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM, size = 1048560, size_out = 59203 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 59216 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.ELM, type = size, size_out = 533 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF, size = 1048560, size_out = 533 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 544 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\LAYERS.INF, type = size, size_out = 58092 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM, size = 1048560, size_out = 58092 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 58096 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.ELM, type = size, size_out = 53477 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM, size = 1048560, size_out = 53477 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 53488 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.ELM, type = size, size_out = 48039 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM, size = 1048560, size_out = 48039 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 48048 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.ELM, type = size, size_out = 600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF, size = 1048560, size_out = 600 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\QUAD.INF, type = size, size_out = 586 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF, size = 1048560, size_out = 586 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.INF, type = size, size_out = 45838 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM, size = 1048560, size_out = 45838 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 45840 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF, type = size, size_out = 569 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF, size = 1048560, size_out = 569 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.INF, type = size, size_out = 103279 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM, size = 1048560, size_out = 103279 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 103280 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.ELM, type = size, size_out = 456 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF, size = 1048560, size_out = 456 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\SATIN.INF, type = size, size_out = 82237 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM, size = 1048560, size_out = 82237 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 82240 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\SKY.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF, type = size, size_out = 466 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF, size = 1048560, size_out = 466 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 480 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.INF, type = size, size_out = 978206 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS, size = 1048560, size_out = 978206 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 978208 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES\MSB1ENES.ITS, type = size, size_out = 1469358 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS, size = 1048560, size_out = 420798 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 420800 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR\MSB1FRAR.ITS, type = size, size_out = 2120459 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX, destination_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1AR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 1536 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX, size = 1048560, size_out = 1536 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1552 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CACH.LEX, type = size, size_out = 178576 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL, size = 1048560, size_out = 178576 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 178592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1CORE.DLL, type = size, size_out = 266096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL, size = 1048560, size_out = 266096 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 266112 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1STAR.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX, type = size, size_out = 70544 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, size = 1048560, size_out = 70544 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 70560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\MSB1XTOR.DLL, type = size, size_out = 221184 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, size = 1048560, size_out = 221184 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 221200 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\WTSP61MS.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 154960 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, size = 1048560, size_out = 154960 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 154976 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBE7INTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 855376 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, size = 1048560, size_out = 855376 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 855392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll, type = size, size_out = 665117 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX, size = 1048560, size_out = 665117 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 665120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\CHINESET.SHX, type = size, size_out = 326 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP, size = 1048560, size_out = 326 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP.id-9C354B42.[restdoc@protonmail.com].zoh, size = 336 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\ICAD.FMP, type = size, size_out = 223699 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX, size = 1048560, size_out = 223699 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 223712 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHGDTXT.SHX, type = size, size_out = 648211 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX, size = 1048560, size_out = 648211 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 648224 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTGTXT.SHX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\WHTMTXT.SHX, type = size, size_out = 99672 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe, size = 1048560, size_out = 99672 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 99680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 246 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe, type = size, size_out = 47976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll, size = 1048560, size_out = 47976 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 47984 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 258 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll, type = size, size_out = 184648 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll, size = 1048560, size_out = 184648 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 184656 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
|
For performance reasons, the remaining 2448 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9d4
19142
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\BOOTSECT.BAK, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\BOOTSECT.BAK, type = size, size_out = 8192 |
|
1 | |
| File | Get Info | filename = C:\BOOTSECT.BAK, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\BOOTSECT.BAK.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\BOOTSECT.BAK, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\BOOTSECT.BAK.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\BOOTSECT.BAK, size = 1048560, size_out = 8192 |
|
1 | |
| File | Write | filename = C:\BOOTSECT.BAK.id-9C354B42.[restdoc@protonmail.com].zoh, size = 8208 |
|
1 | |
| File | Read | filename = C:\BOOTSECT.BAK, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\BOOTSECT.BAK.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\BOOTSECT.BAK |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2424 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2424 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2432 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, type = size, size_out = 1606 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, size = 1048560, size_out = 1606 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1616 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, type = size, size_out = 913 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, size = 1048560, size_out = 913 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 928 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 27195 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, size = 1048560, size_out = 27195 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[restdoc@protonmail.com].zoh, size = 27200 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\pss10r.chm |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 31094 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 31094 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 31104 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, type = size, size_out = 1061 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 1048560, size_out = 1061 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1072 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.JPG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, type = size, size_out = 1682 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, size = 1048560, size_out = 1682 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 224 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\MS.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = size, size_out = 791686 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = size, size_out = 27045 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = size, size_out = 89600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml, type = size, size_out = 2764 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat, type = size, size_out = 46624 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat, type = size, size_out = 747280 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML, type = size, size_out = 1941 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, size = 1048560, size_out = 1941 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1952 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\README.HTM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, type = size, size_out = 1852 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, size = 1048560, size_out = 1852 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 1856 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, type = size, size_out = 67190 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 1048560, size_out = 67190 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 67200 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, type = size, size_out = 9352 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 1048560, size_out = 9352 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 9360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4288 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW\Office32WW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, type = size, size_out = 4207 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, size = 1048560, size_out = 4207 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4208 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, type = size, size_out = 5884 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, size = 1048560, size_out = 5884 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 5888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, type = size, size_out = 20577 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 1048560, size_out = 20577 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 20592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, type = size, size_out = 11463 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, size = 1048560, size_out = 11463 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 11472 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\MCABOUT.HTM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, type = size, size_out = 8564 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, size = 1048560, size_out = 8564 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 8576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033\TIME.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, type = size, size_out = 227311 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 1048560, size_out = 227311 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 227312 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 1074 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = size, size_out = 2575 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = size, size_out = 4587 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = size, size_out = 2319 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, type = size, size_out = 645 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, size = 1048560, size_out = 645 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, size = 656 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = size, size_out = 3792 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = size, size_out = 231 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = size, size_out = 23871 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, type = size, size_out = 5524 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, type = size, size_out = 10340 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 116724 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 237 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 6381 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 232 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 5115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 3981 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 5115 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 14049 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 233 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 1920 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 15776 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 37316 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 237 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 4734 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 81292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 1990 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 232 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 10569 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 230 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 7505 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 1864 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 3650 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 4638 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 26720 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 3168 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 15063 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf, type = size, size_out = 1569 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF, size = 1048560, size_out = 1569 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = size, size_out = 25234 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, size = 1048560, size_out = 25234 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 25248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\dwtrig20.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 2985 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, size = 1048560, size_out = 2985 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, type = size, size_out = 25106 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, size = 1048560, size_out = 25106 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 25120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, type = size, size_out = 5179 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 1048560, size_out = 5179 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 5184 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, type = size, size_out = 1232 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, size = 1048560, size_out = 1232 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, type = size, size_out = 18413 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 1048560, size_out = 18413 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 18416 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, type = size, size_out = 1659 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, size = 1048560, size_out = 1659 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 1664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, type = size, size_out = 2574 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, size = 1048560, size_out = 2574 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, type = size, size_out = 37440 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, size = 1048560, size_out = 37440 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 37456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, type = size, size_out = 1593 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, size = 1048560, size_out = 1593 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1600 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, type = size, size_out = 21745 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 1048560, size_out = 21745 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 21760 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG, type = size, size_out = 16738 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, size = 1048560, size_out = 16738 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 16752 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, type = size, size_out = 3611 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, size = 1048560, size_out = 3611 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3616 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, type = size, size_out = 34163 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, size = 1048560, size_out = 34163 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 34176 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, type = size, size_out = 937 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, size = 1048560, size_out = 937 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 944 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, type = size, size_out = 1675 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, size = 1048560, size_out = 1675 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, type = size, size_out = 18380 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, size = 1048560, size_out = 18380 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 18384 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, type = size, size_out = 4991 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, size = 1048560, size_out = 4991 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, type = size, size_out = 44302 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 44302 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 44304 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, type = size, size_out = 944994 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, size = 1048560, size_out = 944994 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 945008 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\adovbs.inc, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini, type = size, size_out = 14951 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\adovbs.inc, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\adovbs.inc.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\adovbs.inc, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 3467 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 581394 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, type = size, size_out = 10888 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 661220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 2821 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 5620 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 5025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 24852 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, type = size, size_out = 5072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 1545 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 29268 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 29268 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 4793 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 4813 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 109292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 99127 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 3057 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 25998 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 205220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 61220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 61220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 229220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 2820 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 19846 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 4570 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 2821 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 5025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 27691 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 56543 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 7261 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 23722 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 14239 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\Filters.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\Filters.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\Filters.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | type = size, size_out = 17248 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl, size = 1048560, size_out = 17248 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, size = 17264 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 18738 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 18738 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, size = 18752 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl, type = size, size_out = 11891 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 11891 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 11904 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF, type = size, size_out = 517 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 517 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 528 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF, type = size, size_out = 502 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 502 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 512 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF, type = size, size_out = 12702 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 12702 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 12704 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF, type = size, size_out = 3484 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 3484 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3488 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF, type = size, size_out = 3140 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 3140 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3152 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF, type = size, size_out = 3966 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, size = 1048560, size_out = 3966 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3968 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF, type = size, size_out = 3026 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, size = 1048560, size_out = 3026 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3040 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF, type = size, size_out = 4734 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 4734 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4736 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF, type = size, size_out = 5684 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 5684 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 5696 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF, type = size, size_out = 20578 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 20578 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 20592 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 10832 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF, size = 1048560, size_out = 10832 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 10848 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\msitss55.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3746 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 3746 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3760 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\OARPMANR.DLL, type = size, size_out = 2636 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, size = 1048560, size_out = 2636 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2640 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, type = size, size_out = 6636 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, size = 1048560, size_out = 6636 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 6640 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF |
|
1 | |
| File | Create | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, type = size, size_out = 4612 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
|
For performance reasons, the remaining 4207 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9d8
12288
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\Fonts\jpn_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\jpn_boot.ttf, type = size, size_out = 1984228 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\jpn_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\jpn_boot.ttf, destination_filename = C:\Boot\Fonts\jpn_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, type = size, size_out = 2503680 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786702 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, type = size, size_out = 9958388 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, type = size, size_out = 11482605 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, type = size, size_out = 885760 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, size = 1048560, size_out = 885760 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 885776 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, type = size, size_out = 18874884 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, type = size, size_out = 107912 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, size = 1048560, size_out = 107912 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 107920 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033\dwintl20.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, type = size, size_out = 838536 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, size = 1048560, size_out = 838536 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 838544 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\DW20.EXE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, type = size, size_out = 14127746 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, type = size, size_out = 2517504 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786694 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, type = size, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, type = size, size_out = 1377656 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 329096 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 329104 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\setup.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\System\ado\adovbs.inc, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 715840 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 260 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = size, size_out = 36233052 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\OWOW32WW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\pagefile.sys, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, type = size, size_out = 99136 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 99136 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 99152 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\DESIGNER\MSADDNDR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, type = size, size_out = 629664 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 629664 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 629680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, type = size, size_out = 38768 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 38768 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 38784 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, type = size, size_out = 6811 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, size = 1048560, size_out = 6811 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 6816 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.CFG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, type = size, size_out = 323936 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 323936 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 323952 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\EPSIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 606062 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, size = 1048560, size_out = 606062 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 606064 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\CGMIMP32.FNT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, type = size, size_out = 280448 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 280448 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 280464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\WPGIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = size, size_out = 193024 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 8704 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 22528 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 8704 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 10240 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 43520 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 3072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 3072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 32768 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 3072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 927744 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 353280 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 2103296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 397312 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 383488 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 2048 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 695296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 26624 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 378880 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 198056 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, size = 1048560, size_out = 198056 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 198064 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEINTL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, type = size, size_out = 52656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, size = 1048560, size_out = 52656 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 52672 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEODBCI.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, type = size, size_out = 20944 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, size = 1048560, size_out = 20944 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 20960 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACERECR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, type = size, size_out = 862608 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, size = 1048560, size_out = 862608 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 862624 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ACEWSTR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, type = size, size_out = 154448 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, size = 1048560, size_out = 154448 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 154464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\ALRTINTL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, type = size, size_out = 744888 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, size = 1048560, size_out = 744888 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 744896 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEDAO.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, type = size, size_out = 899992 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, size = 1048560, size_out = 899992 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 900000 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL, type = size, size_out = 297360 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL, size = 1048560, size_out = 297360 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 297376 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACETXT.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL, type = size, size_out = 3050912 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEWDAT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL, type = size, size_out = 138616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL, size = 1048560, size_out = 138616 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 138624 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_PDF.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL, type = size, size_out = 72521600 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSORES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 6747 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB, size = 1048560, size_out = 6747 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.id-9C354B42.[restdoc@protonmail.com].zoh, size = 6752 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL, type = size, size_out = 30056 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL, size = 1048560, size_out = 30056 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 30064 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\ODeploy.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ODBCMON.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL, type = size, size_out = 15224 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL, size = 1048560, size_out = 15224 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15232 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL, type = size, size_out = 191872 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL, size = 1048560, size_out = 191872 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 191888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 715840 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 260 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL, type = size, size_out = 261008 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, size = 1048560, size_out = 261008 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, size = 261024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\USP10.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\SERCONV.DLL, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PJRESC.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, type = size, size_out = 147344 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 147344 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 147360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\WISC30.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FBIBLIO.DLL, type = size, size_out = 444027 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX, size = 1048560, size_out = 444027 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 444032 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSWDS_EN.LEX |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL, type = size, size_out = 181120 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL, size = 1048560, size_out = 181120 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 181136 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MSTAG.TLB, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FPLACE.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\MSCONV97.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 15744 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe, size = 1048560, size_out = 15744 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 15760 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 250 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\SmartTagInstall.exe |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv, type = size, size_out = 57248 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv, size = 1048560, size_out = 57248 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv.id-9C354B42.[restdoc@protonmail.com].zoh, size = 57264 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\Wks9Pxy.cnv |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV, type = size, size_out = 289648 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV, size = 1048560, size_out = 289648 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, size = 289664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF, type = size, size_out = 529 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF, size = 1048560, size_out = 529 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 544 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS\AXIS.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF, type = size, size_out = 450 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF, size = 1048560, size_out = 450 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 464 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE\BREEZE.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF, type = size, size_out = 465 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF, size = 1048560, size_out = 465 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 480 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF, type = size, size_out = 501 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF, size = 1048560, size_out = 501 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 512 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES\CAPSULES.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, type = size, size_out = 47684 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, size = 1048560, size_out = 47684 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 47696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF, type = size, size_out = 486 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF, size = 1048560, size_out = 486 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 496 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM, type = size, size_out = 45528 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM, size = 1048560, size_out = 45528 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 45536 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF, type = size, size_out = 597 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF, size = 1048560, size_out = 597 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\EXPEDITN.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF, type = size, size_out = 526 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF, size = 1048560, size_out = 526 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 528 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\LEVEL.INF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM, type = size, size_out = 50761 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM, size = 1048560, size_out = 50761 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 50768 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF, type = size, size_out = 585 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF, size = 1048560, size_out = 585 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\NETWORK.INF, type = size, size_out = 91861 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM, size = 1048560, size_out = 91861 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 91872 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS\PAPYRUS.ELM, type = size, size_out = 539 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF, size = 1048560, size_out = 539 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 544 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL\PIXEL.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM, type = size, size_out = 45582 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM, size = 1048560, size_out = 45582 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 45584 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.ELM, type = size, size_out = 46942 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM, size = 1048560, size_out = 46942 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 46944 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\RADIAL.ELM, type = size, size_out = 586 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF, size = 1048560, size_out = 586 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED\REFINED.ELM, type = size, size_out = 73822 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM, size = 1048560, size_out = 73822 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 73824 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR\RICEPAPR.ELM, type = size, size_out = 66016 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM, size = 1048560, size_out = 66016 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 66032 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.ELM, type = size, size_out = 487 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF, size = 1048560, size_out = 487 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 496 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\RIPPLE.INF, type = size, size_out = 73271 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM, size = 1048560, size_out = 73271 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 73280 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF, type = size, size_out = 613 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF, size = 1048560, size_out = 613 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 624 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\RMNSQUE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, type = size, size_out = 68337 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM, size = 1048560, size_out = 68337 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 68352 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING\SPRING.ELM, type = size, size_out = 7276 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF, size = 1048560, size_out = 7276 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 7280 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\THEMES.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 65996 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM, size = 1048560, size_out = 65996 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 66000 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.ELM, type = size, size_out = 417 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF, size = 1048560, size_out = 417 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER\WATER.INF, type = size, size_out = 49094 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM, size = 1048560, size_out = 49094 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 49104 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF, type = size, size_out = 683 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF, size = 1048560, size_out = 683 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 688 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR\WATERMAR.INF, type = size, size_out = 1658904 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS, destination_filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR\MSB1ARFR.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 678912 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX, size = 1048560, size_out = 678912 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 678928 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\WT61ES.LEX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 616960 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX, size = 1048560, size_out = 616960 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 616976 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\WT61FR.LEX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 990032 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, size = 1048560, size_out = 990032 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 990048 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll, type = size, size_out = 902841 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX, size = 1048560, size_out = 902841 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 902848 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\GBCBIG.SHX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 18264 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, size = 1048560, size_out = 18264 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 18272 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 373760 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 2560 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 41472 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 181248 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 9728 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 17408 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 8192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msader15.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msader15.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\msader15.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll, type = size, size_out = 1499136 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msado15.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msado15.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
|
For performance reasons, the remaining 2522 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9dc
18826
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, type = size, size_out = 1565 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 1048560, size_out = 1565 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1568 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, type = size, size_out = 3186 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, size = 1048560, size_out = 3186 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 3200 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 4207 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 4207 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4208 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 5884 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 5884 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 5888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, type = size, size_out = 1383 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, size = 1048560, size_out = 1383 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1392 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 242 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2362 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2362 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2368 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, type = size, size_out = 1231 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, size = 1048560, size_out = 1231 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1232 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 242 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 832 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, type = size, size_out = 67190 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, size = 1048560, size_out = 67190 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[restdoc@protonmail.com].zoh, size = 67200 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\setup.chm |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 9352 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 9352 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 9360 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, type = size, size_out = 1349 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, size = 1048560, size_out = 1349 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1360 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, type = size, size_out = 2624 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 2624 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2640 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = size, size_out = 4274 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 4274 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 4288 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = size, size_out = 31744 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat, type = size, size_out = 591 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML, type = size, size_out = 1100368 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, type = size, size_out = 1231 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML, size = 1048560, size_out = 1231 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, size = 1232 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, size = 242 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, type = size, size_out = 5557 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, size = 1048560, size_out = 5557 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 5568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, type = size, size_out = 819 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, size = 1048560, size_out = 819 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 832 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 244 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, type = size, size_out = 37689 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 1048560, size_out = 37689 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 37696 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, type = size, size_out = 26929 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, size = 1048560, size_out = 26929 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 26944 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, type = size, size_out = 1450 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, size = 1048560, size_out = 1450 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 246 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, type = size, size_out = 6421 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, size = 1048560, size_out = 6421 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 6432 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 238 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\PrjProrWW.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, type = size, size_out = 16683 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 1048560, size_out = 16683 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 16688 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, type = size, size_out = 1452 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, size = 1048560, size_out = 1452 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1456 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 240 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\ProjectMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, type = size, size_out = 1872 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML, size = 1048560, size_out = 1872 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1888 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\ProPlusrWW.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\SETUP.XML, type = size, size_out = 31094 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, size = 1048560, size_out = 31094 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 31104 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR\SETUP.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\BASMLA.XSL, type = size, size_out = 9503 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, size = 1048560, size_out = 9503 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 9504 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us\VisioMUI.XML |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, type = size, size_out = 1183416 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 134856 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 134864 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.TXT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg, type = size, size_out = 237 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 19780 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, size = 1048560, size_out = 19780 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 19792 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, type = size, size_out = 20575 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 1048560, size_out = 20575 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 20576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, type = size, size_out = 28595 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, size = 1048560, size_out = 28595 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 28608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, type = size, size_out = 1347 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, size = 1048560, size_out = 1347 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, type = size, size_out = 32403 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 1048560, size_out = 32403 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 32416 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, type = size, size_out = 32433 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 1048560, size_out = 32433 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 32448 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\THMBNAIL.PNG, type = size, size_out = 60724 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 60724 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 60736 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, type = size, size_out = 2476 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, size = 1048560, size_out = 2476 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2480 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, type = size, size_out = 1379 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, size = 1048560, size_out = 1379 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1392 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, type = size, size_out = 1364 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, size = 1048560, size_out = 1364 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, size = 1376 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\THMBNAIL.PNG, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, type = size, size_out = 1439 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, size = 1048560, size_out = 1439 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1440 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, type = size, size_out = 37112 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, size = 1048560, size_out = 37112 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 37120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, type = size, size_out = 1666 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 1048560, size_out = 1666 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1680 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, type = size, size_out = 19563 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, size = 1048560, size_out = 19563 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 19568 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, type = size, size_out = 2604 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, size = 1048560, size_out = 2604 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, size = 2608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE\THMBNAIL.PNG, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, type = size, size_out = 1009 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, size = 1048560, size_out = 1009 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = size, size_out = 27177 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, size = 1048560, size_out = 27177 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 27184 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, type = size, size_out = 2209 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, size = 1048560, size_out = 2209 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2224 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\PREVIEW.GIF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, type = size, size_out = 21812 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG, size = 1048560, size_out = 21812 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 21824 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\THMBNAIL.PNG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, type = size, size_out = 72031 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, size = 1048560, size_out = 72031 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 72032 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBENDF98.CHM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, type = size, size_out = 169637 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, size = 1048560, size_out = 169637 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 169648 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Services\verisign.bmp, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\desktop.ini, type = size, size_out = 2702 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Services\verisign.bmp, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Services\verisign.bmp.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Services\verisign.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png, type = size, size_out = 11861 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 12349 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv, type = size, size_out = 341322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv, type = size, size_out = 325322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 141214 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 157214 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 117214 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 141214 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 157292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 157292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 149292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 125292 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv, type = size, size_out = 2922 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 3939 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 4503 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 4515 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 4200 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 2739 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 2211 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 1551 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 19477 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 52251 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 181298 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 181322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 237298 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 269322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 3525 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 3580 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 3595 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png, type = size, size_out = 1885 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 1375 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 24520 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 4570 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 2821 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 4563 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 4669 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 26516 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 5025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 2962 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 30138 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 5072 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 4728 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 5742 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png, type = size, size_out = 4570 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 2821 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 17378 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 2903 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 5025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3887 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 4570 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 2820 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 6431 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 24557 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 5088 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3130 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 5025 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3118 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 4955 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3081 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 45199 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 3122 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 1400 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png, type = size, size_out = 35858 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\setup.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 194963 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 629220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 6716 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 12008 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 237226 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 253220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 789322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 869322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 3016 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 1849 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 3016 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 2041 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 2891 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 3016 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 2019 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 13239 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 5761 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 8169 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 25662 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 6166 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 7946 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 4422 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 7888 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 16842 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 253226 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 261220 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 797322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 869322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 933322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 989322 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 5372 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 4724 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 4710 |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 22969 |
|
1 | |
|
For performance reasons, the remaining 4465 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9e0
12612
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| Module | Get Handle | module_name = c:\windows\syswow64\kernel32.dll, base_address = 0x76c20000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\syswow64\kernel32.dll, function = Wow64DisableWow64FsRedirection, address_out = 0x76c4d650 |
|
1 | |
| System | Sleep | duration = 100 milliseconds (0.100 seconds) |
|
1 | |
| File | Create | filename = C:\Boot\Fonts\kor_boot.ttf, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\kor_boot.ttf, type = size, size_out = 2371360 |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\kor_boot.ttf, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Boot\Fonts\kor_boot.ttf, destination_filename = C:\Boot\Fonts\kor_boot.ttf.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, type = size, size_out = 2506240 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, type = size, size_out = 2513920 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786700 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, type = size, size_out = 14819276 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, type = size, size_out = 13642474 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab, destination_filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, type = size, size_out = 50823389 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C\VisioLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, type = size, size_out = 2503680 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, type = size, size_out = 2511872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi, destination_filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C\ProjectMUI.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, type = size, size_out = 4095519 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\THMBNAIL.PNG, type = size, size_out = 1857 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 1048560, size_out = 1857 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1872 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, size = 266 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Microsoft.VC90.CRT.manifest |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, type = size, size_out = 655872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, size = 1048560, size_out = 655872 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 655888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN\PREVIEW.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\msvcr90.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, type = size, size_out = 191872 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, size = 1048560, size_out = 191872 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, size = 191888 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.msi, size = 236 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\osetupui.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, type = size, size_out = 28016276 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab, destination_filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786686 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccLR.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, type = size, size_out = 174440 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 174440 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 174448 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ose.exe |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 415024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL\PREVIEW.GIF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\PidGenX.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, type = size, size_out = 177720283 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C\ProPrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033\VBLR6.CHM, type = size, size_out = 7378792 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\osetup.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, type = size, size_out = 162970271 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab, destination_filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C\PrjPrrWW.cab.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = size, size_out = 1992192 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786696 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\Office32WW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = size, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 415008 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 415024 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\PidGenX.dll |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = size, size_out = 715834 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 715834 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 715840 |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.id-9C354B42.[restdoc@protonmail.com].zoh, size = 260 |
|
1 | |
| File | Delete | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, type = size, size_out = 12060672 |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi, destination_filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C\VisiorWW.msi.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = size, size_out = 64096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 1048560, size_out = 64096 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 64112 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033\EEINTL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = size, size_out = 2557 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, size = 1048560, size_out = 2557 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 2560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.CNT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, type = size, size_out = 543304 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, size = 1048560, size_out = 543304 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 543312 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, type = size, size_out = 566 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, size = 1048560, size_out = 566 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, size = 576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest.id-9C354B42.[restdoc@protonmail.com].zoh, size = 254 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\eqnedt32.exe.manifest |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, type = size, size_out = 176311 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, size = 1048560, size_out = 176311 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[restdoc@protonmail.com].zoh, size = 176320 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.HLP |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, type = size, size_out = 7656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, size = 1048560, size_out = 7656 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 7664 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EQUATION\MTEXTRA.TTF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, type = size, size_out = 31104 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, size = 1048560, size_out = 31104 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 31120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\EURO\MSOEURO.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\DW\DBGHELP.DLL, type = size, size_out = 1312656 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 264096 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 264112 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 320384 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, size = 1048560, size_out = 320384 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 320400 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\GRPHFLT\GIFIMP32.FLT |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, type = size, size_out = 1257984 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 209424 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 209440 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = size, size_out = 4608 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui, type = size, size_out = 9216 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll, type = size, size_out = 40960 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll, type = size, size_out = 94720 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui, type = size, size_out = 1367552 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui, type = size, size_out = 169984 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 40448 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 448000 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 224256 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 110592 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 544768 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 12288 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 1246720 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 503296 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 101376 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 4096 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 3584 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll, type = size, size_out = 419232 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL, size = 1048560, size_out = 419232 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 419248 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr\MSCDM.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, type = size, size_out = 41864 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 1048560, size_out = 41864 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 41872 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033\MSSOAPR3.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, type = size, size_out = 3213192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACECORE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, type = size, size_out = 442272 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, size = 1048560, size_out = 442272 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, size = 442288 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEOLEDB.DLL, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEEXCH.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF, type = size, size_out = 55744 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL, size = 1048560, size_out = 55744 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 55760 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACERCLR.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL, type = size, size_out = 691616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL, size = 1048560, size_out = 691616 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 691632 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEREP.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF, type = size, size_out = 502168 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, size = 1048560, size_out = 502168 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 502176 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\ACEXBE.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, type = size, size_out = 1784192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786690 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\EXP_XPS.DLL, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL, type = size, size_out = 4289376 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\IACOM2.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL, type = size, size_out = 56192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL, type = size, size_out = 1198464 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL, size = 1048560, size_out = 149904 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB, size = 149920 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MUAUTH.CAB, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSPTLS.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe, type = size, size_out = 232840 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe, size = 1048560, size_out = 232840 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232848 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll, type = size, size_out = 47520 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll, size = 1048560, size_out = 47520 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 47536 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OSetupPS.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, type = size, size_out = 1463568 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, size = 1048560, size_out = 1048560 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, size = 1048560, size_out = 415008 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 415024 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\pidgenx.dll |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 3943312 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786688 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\PRJRES.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 49488 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, size = 1048560, size_out = 49488 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 49504 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\VBAJET32.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL, type = size, size_out = 146192 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL, size = 1048560, size_out = 146192 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 146208 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF, type = size, size_out = 47710 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF, size = 1048560, size_out = 47710 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 47712 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL, type = size, size_out = 591168 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL, size = 1048560, size_out = 591168 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, size = 591184 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF, size = 230 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL, type = size, size_out = 17280 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL, size = 1048560, size_out = 17280 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 17296 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033\STINTL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL, type = size, size_out = 159104 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL, size = 1048560, size_out = 159104 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 159120 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\FSTOCK.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL, type = size, size_out = 110976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL, size = 1048560, size_out = 110976 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 110992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\METCONV.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL, type = size, size_out = 364928 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL, size = 1048560, size_out = 364928 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 364944 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Smart Tag\MOFL.DLL |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT632.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, type = size, size_out = 196976 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV, size = 1048560, size_out = 196976 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, size = 196992 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TextConv\WPFT532.CNV |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM, type = size, size_out = 69047 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM, size = 1048560, size_out = 69047 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 69056 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS\BLENDS.ELM |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM, desired_access = GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM, type = size, size_out = 44745 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM, size = 1048560, size_out = 44745 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 44752 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON\CANYON.ELM, type = size, size_out = 610 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, size = 1048560, size_out = 610 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 624 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE\CASCADE.INF, type = size, size_out = 54803 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, size = 1048560, size_out = 54803 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 54816 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS\COMPASS.ELM, type = size, size_out = 569 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF, size = 1048560, size_out = 569 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 576 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE\DEEPBLUE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE\CONCRETE.INF, type = size, size_out = 45262 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM, size = 1048560, size_out = 45262 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 45264 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO\ECHO.ELM, type = size, size_out = 595 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF, size = 1048560, size_out = 595 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 608 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE\ECLIPSE.INF, type = size, size_out = 47352 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM, size = 1048560, size_out = 47352 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 47360 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 228 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE\EDGE.ELM, type = size, size_out = 77294 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM, size = 1048560, size_out = 77294 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 77296 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF, type = size, size_out = 547 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF, size = 1048560, size_out = 547 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN\EVRGREEN.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF, type = size, size_out = 68048 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM, size = 1048560, size_out = 68048 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 68064 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM.id-9C354B42.[restdoc@protonmail.com].zoh, size = 226 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.ELM |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE\SLATE.INF, type = size, size_out = 587 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF, size = 1048560, size_out = 587 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 592 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE\PROFILE.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO\STUDIO.INF, type = size, size_out = 484 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, size = 1048560, size_out = 484 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 496 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 232 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA\SONORA.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE\ICE.INF, type = size, size_out = 555 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF, size = 1048560, size_out = 555 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 560 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG\SUMIPNTG.INF, type = size, size_out = 229888 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL, size = 1048560, size_out = 229888 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 229904 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.DLL, type = size, size_out = 1046514 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS, size = 1048560, size_out = 1046514 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1046528 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN\MSB1ESEN.ITS, type = size, size_out = 840364 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS, size = 1048560, size_out = 840364 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 840368 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS, type = size, size_out = 1110528 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN\MSB1FREN.ITS, type = size, size_out = 324330 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX, size = 1048560, size_out = 324330 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 324336 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\BIGFONT.SHX, type = size, size_out = 436710 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX, size = 1048560, size_out = 436710 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 436720 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX.id-9C354B42.[restdoc@protonmail.com].zoh, size = 234 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts\EXTFONT.SHX, type = size, size_out = 10080 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 10080 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF, size = 10096 |
|
1 | |
| File | Read | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF.id-9C354B42.[restdoc@protonmail.com].zoh, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF, size = 250 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll, type = size, size_out = 10632 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL, size = 1048560, size_out = 10632 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 10640 |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL, size = 1048560, size_out = 0 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 236 |
|
1 | |
| File | Delete | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033\MSOSVINT.DLL, type = size, size_out = 2522488 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Move | source_filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL, destination_filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, desired_access = GENERIC_WRITE, GENERIC_READ |
|
1 | |
| File | Read | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144, size_out = 262144 |
|
3 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 786692 |
|
1 | |
| File | Write | filename = C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL.id-9C354B42.[restdoc@protonmail.com].zoh, size = 262144 |
|
3 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 98304 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msado28.tlb, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msado28.tlb.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\msado28.tlb, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 61440 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msador15.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msador15.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\msador15.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 495616 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msadox.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msadox.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\msadox.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 28672 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msadox28.tlb, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msadox28.tlb.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\msadox28.tlb, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 106496 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msadrh15.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\ado\msadrh15.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\ado\msadrh15.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 29184 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\DirectDB.dll, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\DirectDB.dll.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\DirectDB.dll, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 93696 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\en-US\wab32res.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\en-US\wab32res.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\en-US\wab32res.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 9728 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 5120 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 5632 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 13824 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 7168 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 5632 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 518 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\handler.reg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\handler.reg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\handler.reg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
| File | Get Info | filename = C:\Program Files\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF, type = size, size_out = 588 |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\handsafe.reg, type = file_attributes |
|
1 | |
| File | Get Info | filename = C:\Program Files\Common Files\System\msadc\handsafe.reg.id-9C354B42.[restdoc@protonmail.com].zoh, type = file_attributes |
|
1 | |
| File | Create | filename = C:\Program Files\Common Files\System\msadc\handsafe.reg, desired_access = GENERIC_WRITE, GENERIC_READ, share_mode = FILE_SHARE_READ, FILE_SHARE_WRITE |
|
1 | |
|
For performance reasons, the remaining 2642 entries are omitted.
The remaining entries can be found in glog.xml. |
|||||
Thread 0x9e4
251
0
| Category | Operation | Information | Success | Count | Logfile |
|---|
Thread 0x9e8
1247
0
| Category | Operation | Information | Success | Count | Logfile |
|---|
Process #2: cmd.exe
281
0
| Information | Value |
|---|---|
| ID | #2 |
| File Name | c:\windows\system32\cmd.exe |
| Command Line | "C:\Windows\system32\cmd.exe" |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:31, Reason: Child Process |
| Unmonitor | End Time: 00:01:31, Reason: Self Terminated |
| Monitor Duration | 00:00:59 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x990 |
| Parent PID | 0x97c (c:\users\5p5nrgjn0js halpmcxz\desktop\rruzcj.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
994
|
Threads
Thread 0x994
281
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-06-09 09:41:44 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 102211 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 15339253522 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\cmd.exe, base_address = 0x4a590000 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\kernel32.dll, base_address = 0x76e30000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = SetThreadUILanguage, address_out = 0x76e46d40 |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| Environment | Get Environment String | - |
|
2 | |
| Registry | Open Key | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 24, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 64, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor, value_name = AutoRun, data = 64, type = REG_NONE |
|
1 | |
| Registry | Open Key | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DisableUNCCheck, data = 64, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = EnableExtensions, data = 1, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DelayedExpansion, data = 1, type = REG_NONE |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = DefaultColor, data = 0, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = CompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = PathCompletionChar, data = 9, type = REG_DWORD_LITTLE_ENDIAN |
|
1 | |
| Registry | Read Value | reg_name = HKEY_CURRENT_USER\Software\Microsoft\Command Processor, value_name = AutoRun, data = 9, type = REG_NONE |
|
1 | |
| Module | Get Filename | process_name = c:\windows\system32\cmd.exe, file_name_orig = C:\Windows\system32\cmd.exe, size = 260 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Environment | Get Environment String | name = PROMPT |
|
1 | |
| Environment | Set Environment String | name = PROMPT, value = $P$G |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Get Environment String | name = COMSPEC, result_out = C:\Windows\system32\cmd.exe |
|
1 | |
| Environment | Get Environment String | name = KEYS |
|
1 | |
| File | Get Info | filename = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop, type = file_attributes |
|
2 | |
| Environment | Set Environment String | name = =C:, value = C:\Users\5p5NrGJn0jS HALPmcxz\Desktop |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| System | Get Info | type = Operating System |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 36 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 63 |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Module | Get Handle | module_name = c:\windows\system32\kernel32.dll, base_address = 0x76e30000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = CopyFileExW, address_out = 0x76e423d0 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = IsDebuggerPresent, address_out = 0x76e38290 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\kernel32.dll, function = SetConsoleInputExeNameW, address_out = 0x76e417e0 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 38 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 24 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\mode.com, os_pid = 0x9bc, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Environment | Set Environment String | name = COPYCMD |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Module | Load | module_name = NTDLL.DLL, base_address = 0x76f50000 |
|
1 | |
| Module | Get Address | module_name = c:\windows\system32\ntdll.dll, function = NtQueryInformationProcess, address_out = 0x76fa14a0 |
|
1 | |
| Process | Get Info | type = PROCESS_BASIC_INFORMATION |
|
1 | |
| Memory | Read | process_name = C:\Windows\system32\mode.com, address = 8796092887040, size = 896 |
|
1 | |
| Environment | Set Environment String | name = =ExitCode, value = 00000000 |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Set Environment String | name = =ExitCodeAscii |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 38 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 36 |
|
1 | |
| Environment | Get Environment String | name = PATH, result_out = C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ |
|
1 | |
| Environment | Get Environment String | name = PATHEXT, result_out = .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC |
|
1 | |
| Process | Create | process_name = C:\Windows\system32\vssadmin.exe, os_pid = 0x9ec, creation_flags = CREATE_EXTENDED_STARTUPINFO_PRESENT, show_window = SW_SHOWNORMAL |
|
1 | |
| Environment | Set Environment String | name = COPYCMD |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Process | Get Info | type = PROCESS_BASIC_INFORMATION |
|
1 | |
| Memory | Read | process_name = C:\Windows\system32\vssadmin.exe, address = 8796092841984, size = 896 |
|
1 | |
| Environment | Set Environment String | name = =ExitCode, value = 00000000 |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| Environment | Set Environment String | name = =ExitCodeAscii |
|
1 | |
| Environment | Get Environment String | - |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
2 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 2 |
|
1 | |
| Environment | Get Environment String | name = PROMPT, result_out = $P$G |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 38 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Read | filename = STD_INPUT_HANDLE, size = 1, size_out = 1 |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_INPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_INPUT_HANDLE |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Get Info | filename = STD_OUTPUT_HANDLE, type = file_type |
|
1 | |
| File | Open | filename = STD_OUTPUT_HANDLE |
|
1 | |
| File | Write | filename = STD_OUTPUT_HANDLE, size = 5 |
|
1 |
Process #3: mode.com
0
0
| Information | Value |
|---|---|
| ID | #3 |
| File Name | c:\windows\system32\mode.com |
| Command Line | mode con cp select=1251 |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:33, Reason: Child Process |
| Unmonitor | End Time: 00:00:34, Reason: Self Terminated |
| Monitor Duration | 00:00:01 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x9bc |
| Parent PID | 0x990 (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
9C0
|
Process #4: vssadmin.exe
0
0
| Information | Value |
|---|---|
| ID | #4 |
| File Name | c:\windows\system32\vssadmin.exe |
| Command Line | vssadmin delete shadows /all /quiet |
| Initial Working Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ |
| Monitor | Start Time: 00:00:34, Reason: Child Process |
| Unmonitor | End Time: 00:01:31, Reason: Self Terminated |
| Monitor Duration | 00:00:56 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x9ec |
| Parent PID | 0x990 (c:\windows\system32\cmd.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | High (Elevated) |
| Username | XDUWTFONO\5p5NrGJn0jS HALPmcxz |
| Enabled Privileges | SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege |
| Thread IDs |
0x
9F0
0x
A78
0x
A7C
0x
A88
0x
A8C
|
Process #5: vssvc.exe
3
0
| Information | Value |
|---|---|
| ID | #5 |
| File Name | c:\windows\system32\vssvc.exe |
| Command Line | C:\Windows\system32\vssvc.exe |
| Initial Working Directory | C:\Windows\system32\ |
| Monitor | Start Time: 00:00:41, Reason: RPC Server |
| Unmonitor | End Time: 00:04:27, Reason: Terminated by Timeout |
| Monitor Duration | 00:03:45 |
OS Process Information
| Information | Value |
|---|---|
| PID | 0xa90 |
| Parent PID | 0x1cc (c:\windows\system32\services.exe) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | System (Elevated) |
| Username | NT AUTHORITY\SYSTEM |
| Enabled Privileges | SeLockMemoryPrivilege, SeTcbPrivilege, SeSystemProfilePrivilege, SeProfileSingleProcessPrivilege, SeIncreaseBasePriorityPrivilege, SeCreatePagefilePrivilege, SeCreatePermanentPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeAuditPrivilege, SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege, SeIncreaseWorkingSetPrivilege, SeTimeZonePrivilege, SeCreateSymbolicLinkPrivilege |
| Thread IDs |
0x
AB0
0x
AAC
0x
AA8
0x
AA4
0x
AA0
0x
A9C
0x
A94
0x
AC8
0x
B68
0x
8E0
|
Threads
Thread 0xaa4
3
0
| Category | Operation | Information | Success | Count | Logfile |
|---|---|---|---|---|---|
| System | Get Time | type = System Time, time = 2019-06-09 09:41:52 (UTC) |
|
1 | |
| System | Get Time | type = Ticks, time = 110433 |
|
1 | |
| System | Get Time | type = Performance Ctr, time = 16310629800 |
|
1 |
Process #7: System
0
0
| Information | Value |
|---|---|
| ID | #7 |
| File Name | System |
| Command Line | - |
| Initial Working Directory | - |
| Monitor | Start Time: 00:02:48, Reason: Kernel Analysis |
| Unmonitor | End Time: 00:04:27, Reason: Terminated by Timeout |
| Monitor Duration | 00:01:38 |
| Remark | No high level activity detected in monitored regions |
OS Process Information
| Information | Value |
|---|---|
| PID | 0x4 |
| Parent PID | 0x0 (Unknown) |
| Bitness | 64-bit |
| Is Created or Modified Executable |
|
| Integrity Level | System (Elevated) |
| Username | NT AUTHORITY\SYSTEM |
| Enabled Privileges | SeLockMemoryPrivilege, SeTcbPrivilege, SeSystemProfilePrivilege, SeProfileSingleProcessPrivilege, SeIncreaseBasePriorityPrivilege, SeCreatePagefilePrivilege, SeCreatePermanentPrivilege, SeDebugPrivilege, SeAuditPrivilege, SeChangeNotifyPrivilege, SeImpersonatePrivilege, SeCreateGlobalPrivilege, SeIncreaseWorkingSetPrivilege, SeTimeZonePrivilege, SeCreateSymbolicLinkPrivilege |
| Thread IDs |
0x
8
0x
24
0x
38
0x
3C
0x
C4
0x
80
0x
78
0x
C0
0x
28
0x
20
0x
4C
0x
44
0x
9C
0x
40
0x
34
0x
CC
0x
D0
0x
B8
0x
D4
0x
D8
0x
DC
0x
E8
0x
EC
0x
48
0x
64
0x
2C
0x
90
0x
FC
0x
100
0x
10C
0x
104
0x
108
0x
B0
0x
110
0x
5C
0x
60
0x
128
0x
12C
0x
130
0x
134
0x
170
0x
88
0x
98
0x
8C
0x
68
0x
74
0x
268
0x
2E0
0x
84
0x
3B0
0x
1C
0x
440
0x
46C
0x
94
0x
50
0x
474
0x
5C0
0x
5D0
0x
614
0x
470
0x
62C
0x
698
0x
69C
0x
7C
0x
18
0x
748
0x
750
0x
798
0x
7A0
0x
7B4
0x
7BC
0x
7C4
0x
58C
0x
2F8
0x
708
0x
0
0x
A0
0x
BC
0x
54
0x
648
0x
600
|
